Skip to content
Fencer Vulns
medium 4.9

CVE-2025-26482 json

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.

published 2025-09-25 13 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-31169

cvss
4.9
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 23%
public exploits
0
none known

Summary

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.

Patch / fix

  • Dell PowerEdge R770 1.2.6
  • Dell PowerEdge R670 1.2.6
  • Dell PowerEdge R570 1.2.6
  • Dell PowerEdge R470 1.2.6
  • Dell PowerEdge R6715 1.1.2
  • Dell PowerEdge R7715 1.1.2
  • Dell PowerEdge R6725 1.1.3
  • Dell PowerEdge R7725 1.1.3
  • Dell PowerEdge R660 2.5.4
  • Dell PowerEdge R760 2.5.4
  • Dell PowerEdge C6620 2.5.4
  • Dell PowerEdge MX760c 2.5.4
  • Dell PowerEdge R860 2.5.4
  • Dell PowerEdge R960 2.5.4
  • Dell PowerEdge HS5610 2.5.4
  • Dell PowerEdge HS5620 2.5.4
  • Dell PowerEdge R660xs 2.5.4
  • Dell PowerEdge R760xs 2.5.4
  • Dell PowerEdge R760xd2 2.5.4
  • Dell PowerEdge T560 2.5.4
  • Dell PowerEdge R760xa 2.5.4
  • Dell PowerEdge XE9680 2.5.4
  • Dell PowerEdge XE9680L 2.5.4
  • Dell PowerEdge XR5610 2.5.4
  • Dell PowerEdge XR8610t 2.5.4
  • Dell PowerEdge XR8620t 2.5.4
  • Dell PowerEdge XR7620 2.5.4
  • Dell PowerEdge XE8640 2.5.4
  • Dell PowerEdge XE9640 2.5.4
  • Dell PowerEdge T160 2.0.0

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
13 mo ago

Exploit prediction

0.30% chance of exploitation in the next 30 days, higher than 23% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

  • Dell PowerEdge R770
  • Dell PowerEdge R670
  • Dell PowerEdge R570
  • Dell PowerEdge R470
  • Dell PowerEdge R6715
  • Dell PowerEdge R7715
  • Dell PowerEdge R6725
  • Dell PowerEdge R7725
  • Dell PowerEdge R660
  • Dell PowerEdge R760
  • Dell PowerEdge C6620
  • Dell PowerEdge MX760c
  • Dell PowerEdge R860
  • Dell PowerEdge R960
  • Dell PowerEdge HS5610
  • Dell PowerEdge HS5620
  • Dell PowerEdge R660xs
  • Dell PowerEdge R760xs
  • Dell PowerEdge R760xd2
  • Dell PowerEdge T560
  • Dell PowerEdge R760xa
  • Dell PowerEdge XE9680
  • Dell PowerEdge XE9680L
  • Dell PowerEdge XR5610
  • Dell PowerEdge XR8610t
  • Dell PowerEdge XR8620t
  • Dell PowerEdge XR7620
  • Dell PowerEdge XE8640
  • Dell PowerEdge XE9640
  • Dell PowerEdge T160
  • Dell PowerEdge T360
  • Dell PowerEdge R260
  • Dell PowerEdge R360
  • Dell PowerEdge R650
  • Dell PowerEdge R750
  • Dell PowerEdge R750XA
  • Dell PowerEdge C6520
  • Dell PowerEdge MX750C
  • Dell PowerEdge R550
  • Dell PowerEdge R450
  • Dell PowerEdge R650XS
  • Dell PowerEdge R750XS
  • Dell PowerEdge T550
  • Dell PowerEdge XR11
  • Dell PowerEdge XR12
  • Dell PowerEdge XR4510c
  • Dell PowerEdge XR4520c
  • Dell PowerEdge T150
  • Dell PowerEdge T350
  • Dell PowerEdge R250

Classification

Weakness
  • CWE-1258 Exposure of Sensitive System Information Due to Uncleared Debug Information

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.