All vulnerabilities
CVE-2026-81472

Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generat

Dell iDRAC Service Module for Windows
Open in ThreatlineRecord JSON
CVSS
4.2Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in6.1.1.0 or laterFixed versionCVE List
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

  • 6.1.1.0 or lateriDRAC Service Module for WindowsCVE List
  • 6.1.1.0 or lateriDRAC Service Module for LinuxCVE List
  • 6.1.1.0 or lateriDRAC Service Module for ESXiCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Text from CVE List

Affected versions 3

  • iDRAC Service Module for Windowsaffected: all versions before 6.1.1.0 or laterCVE List
  • iDRAC Service Module for Linuxaffected: all versions before 6.1.1.0 or laterCVE List
  • iDRAC Service Module for ESXiaffected: all versions before 6.1.1.0 or laterCVE List

References 1