CVE-2025-26482

State
Published
Severity
4.9 Medium
Published
Sep 25, 2025
Updated
Sep 26, 2025
Reserved
Feb 11, 2025

Read the record on cve.org

Description

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.

Scores

CVSSScoreVectorSource
3.14.9 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:Ndell

Weaknesses

  • CWE-1258 Exposure of Sensitive System Information Due to Uncleared Debug Information

Affected Products

ProductVersions
PowerEdge R770Dell
  • before 1.2.6Affected
PowerEdge R670Dell
  • before 1.2.6Affected
PowerEdge R570Dell
  • before 1.2.6Affected
PowerEdge R470Dell
  • before 1.2.6Affected
PowerEdge R6715Dell
  • before 1.1.2Affected
PowerEdge R7715Dell
  • before 1.1.2Affected
PowerEdge R6725Dell
  • before 1.1.3Affected
PowerEdge R7725Dell
  • before 1.1.3Affected
PowerEdge R660Dell
  • before 2.5.4Affected
PowerEdge R760Dell
  • before 2.5.4Affected
PowerEdge C6620Dell
  • before 2.5.4Affected
PowerEdge MX760cDell
  • before 2.5.4Affected
PowerEdge R860Dell
  • before 2.5.4Affected
PowerEdge R960Dell
  • before 2.5.4Affected
PowerEdge HS5610Dell
  • before 2.5.4Affected
PowerEdge HS5620Dell
  • before 2.5.4Affected
PowerEdge R660xsDell
  • before 2.5.4Affected
PowerEdge R760xsDell
  • before 2.5.4Affected
PowerEdge R760xd2Dell
  • before 2.5.4Affected
PowerEdge T560Dell
  • before 2.5.4Affected
PowerEdge R760xaDell
  • before 2.5.4Affected
PowerEdge XE9680Dell
  • before 2.5.4Affected
PowerEdge XE9680LDell
  • before 2.5.4Affected
PowerEdge XR5610Dell
  • before 2.5.4Affected
PowerEdge XR8610tDell
  • before 2.5.4Affected
PowerEdge XR8620tDell
  • before 2.5.4Affected
PowerEdge XR7620Dell
  • before 2.5.4Affected
PowerEdge XE8640Dell
  • before 2.5.4Affected
PowerEdge XE9640Dell
  • before 2.5.4Affected
PowerEdge T160Dell
  • before 2.0.0Affected
PowerEdge T360Dell
  • before 2.0.0Affected
PowerEdge R260Dell
  • before 2.0.0Affected
PowerEdge R360Dell
  • before 2.0.0Affected
PowerEdge R650Dell
  • before 1.16.2Affected
PowerEdge R750Dell
  • before 1.16.2Affected
PowerEdge R750XADell
  • before 1.16.2Affected
PowerEdge C6520Dell
  • before 1.16.2Affected
PowerEdge MX750CDell
  • before 1.16.2Affected
PowerEdge R550Dell
  • before 1.16.2Affected
PowerEdge R450Dell
  • before 1.16.2Affected
PowerEdge R650XSDell
  • before 1.16.2Affected
PowerEdge R750XSDell
  • before 1.16.2Affected
PowerEdge T550Dell
  • before 1.16.2Affected
PowerEdge XR11Dell
  • before 1.16.2Affected
PowerEdge XR12Dell
  • before 1.16.2Affected
PowerEdge XR4510cDell
  • before 1.17.3Affected
PowerEdge XR4520cDell
  • before 1.17.3Affected
PowerEdge T150Dell
  • before 1.11.1Affected
PowerEdge T350Dell
  • before 1.11.1Affected
PowerEdge R250Dell
  • before 1.11.1Affected
PowerEdge R350Dell
  • before 1.11.1Affected
PowerEdge R740Dell
  • before 2.23.0Affected
PowerEdge R740XDDell
  • before 2.23.0Affected
PowerEdge R640Dell
  • before 2.23.0Affected
PowerEdge R940Dell
  • before 2.23.0Affected
PowerEdge R540Dell
  • before 2.23.0Affected
PowerEdge R440Dell
  • before 2.23.0Affected
PowerEdge T440Dell
  • before 2.23.0Affected
PowerEdge XR2Dell
  • before 2.23.0Affected
PowerEdge R740XD2Dell
  • before 2.23.0Affected
PowerEdge R840Dell
  • before 2.23.0Affected
PowerEdge R940XADell
  • before 2.23.0Affected
PowerEdge T640Dell
  • before 2.23.0Affected
PowerEdge C6420Dell
  • before 2.23.0Affected
PowerEdge FC640Dell
  • before 2.23.0Affected
PowerEdge M640Dell
  • before 2.23.0Affected
PowerEdge M640 (for PE VRTX)Dell
  • before 2.23.0Affected
PowerEdge MX740CDell
  • before 2.23.0Affected
PowerEdge MX840CDell
  • before 2.23.0Affected
PowerEdge C4140Dell
  • before 2.23.0Affected
DSS 8440Dell
  • before 2.23.0Affected
PowerEdge XE2420Dell
  • before 2.23.0Affected
PowerEdge XE7420Dell
  • before 2.23.0Affected
PowerEdge XE7440Dell
  • before 2.23.0Affected
PowerEdge T140Dell
  • before 2.18.0Affected
PowerEdge T340Dell
  • before 2.18.0Affected
PowerEdge R240Dell
  • before 2.18.0Affected
PowerEdge R340Dell
  • before 2.18.0Affected
Dell EMC Storage NX3240Dell
  • before 2.23.0Affected
Dell EMC Storage NX3340Dell
  • before 2.23.0Affected
Dell EMC NX440Dell
  • before 2.18.0Affected
Dell XC Core XC660Dell
  • before 2.5.4Affected
Dell XC Core XC760Dell
  • before 2.5.4Affected
Dell XC Core XC660xsDell
  • before 2.5.4Affected
Dell XC Core XC760xaDell
  • before 2.5.4Affected
Dell EMC XC Core XC450Dell
  • before 1.16.2Affected
Dell EMC XC Core XC650Dell
  • before 1.16.2Affected
Dell EMC XC Core XC750Dell
  • before 1.16.2Affected
Dell EMC XC Core XC750xaDell
  • before 1.16.2Affected
Dell EMC XC Core XC6520Dell
  • before 1.16.2Affected
Dell EMC XC Core 6420 SystemDell
  • before 2.23.0Affected
Dell EMC XC Core XC640 SystemDell
  • before 2.23.0Affected
Dell EMC XC Core XC740xd SystemDell
  • before 2.23.0Affected
Dell EMC XC Core XC740xd2Dell
  • before 2.23.0Affected
Dell EMC XC Core XC940 SystemDell
  • before 2.23.0Affected
Dell EMC XC Core XCXR2Dell
  • before 2.23.0Affected
PowerEdge R6615Dell
  • before 1.11.2Affected
PowerEdge R7615Dell
  • before 1.11.2Affected
PowerEdge R6625Dell
  • before 1.11.2Affected
PowerEdge R7625Dell
  • before 1.11.2Affected
PowerEdge C6615Dell
  • before 1.6.2Affected
PowerEdge R6515Dell
  • before 2.18.1Affected
PowerEdge R6525Dell
  • before 2.18.1Affected
PowerEdge R7515Dell
  • before 2.18.1Affected
PowerEdge R7525Dell
  • before 2.18.1Affected
PowerEdge C6525Dell
  • before 2.18.1Affected
PowerEdge XE8545Dell
  • before 2.17.1Affected
Dell EMC XC Core XC7525Dell
  • before 2.18.1Affected
Dell XC Core XC7625Dell
  • before 1.11.2Affected
PowerEdge R6415Dell
  • before 1.25.0Affected
PowerEdge R7415Dell
  • before 1.25.0Affected
PowerEdge R7425Dell
  • before 1.25.0Affected
iDRAC9Dell
  • before 7.00.00.181Affected
iDRAC9Dell
  • before 7.20.10.50Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.