medium4.9

CVE-2025-26482

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.

Impact

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.

Affected products

Vendor	Product	Affected versions
Dell	Poweredge R770 Firmware	before 1.2.6
Dell	Poweredge R670 Firmware	before 1.2.6
Dell	Poweredge R570 Firmware	before 1.2.6
Dell	Poweredge R470 Firmware	before 1.2.6
Dell	Poweredge R6715 Firmware	before 1.1.2
Dell	Poweredge R7715 Firmware	before 1.1.2
Dell	Poweredge R6725 Firmware	before 1.1.3
Dell	Poweredge R7725 Firmware	before 1.1.3
Dell	Poweredge R660 Firmware	before 2.5.4
Dell	Poweredge R760 Firmware	before 2.5.4
Dell	Poweredge C6620 Firmware	before 2.5.4
Dell	Poweredge Mx760c Firmware	before 2.5.4

Weakness classification

CWE-1258

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-us/000370138/dsa-2025-046-security-update-for-dell-poweredge-server-and-dell-idrac9-for-information-disclosure-vulnerability