PT-2026-128214

CVE-2026-81472

·

Published

2026-10-28

·

Updated

2026-10-28

Description by

CVSS 3.1
4.2
Medium
MetricsAV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2026-81472
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com