CVE-2026-35155CWE-522

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability

High · published April 29, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
18.2
In the wild
Unconfirmed
What it is

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-04-29T03:50Z
EPSS history
Timeline
  • 29 APR 03:50Z
    Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability
    cvelistv5