Search/CVE-2025-26482
● CVE — Medium

CVE-2025-26482

VendordellProductpoweredge c6620 firmware, poweredge hs5610 firmware, poweredge hs5620 firmware, poweredge mx760c firmware, poweredge r660 firmware, poweredge r660xs firmware, poweredge r760 firmware, poweredge r760xa firmware, poweredge r760xd2 firmware, poweredge r760xs firmware, poweredge r860 firmware, poweredge r960 firmware, poweredge t560 firmware, poweredge xe9680 firmware, poweredge xr5610 firmware, poweredge xr8610t firmware, poweredge r470 firmware, poweredge r570 firmware, poweredge r670 firmware, poweredge r6715 firmware, poweredge r6725 firmware, poweredge r770 firmware, poweredge r7715 firmware, poweredge r7725 firmware, poweredge xe9680l firmwareDiscoveredSep 25, 2025UpdatedJan 16, 2026

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS v3.1
4.9 MEDIUM
EPSS
0.30%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.02pp
0.29% → 0.30% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Connections
26 relationships
Timeline
disclosure → media coverage
Sep 25, 2025
Disclosure — published as a CVE record. · last revised by NVD Jan 16, 2026