Dell iDRAC Service Module (iSM) <6.1.1.0: Code Injection Priv Escalation
CVE-2026-81472 Published on October 28, 2026
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Vulnerability Analysis
CVE-2026-81472 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.
Weakness Type
What is a Code Injection Vulnerability?
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CVE-2026-81472 has been classified to as a Code Injection vulnerability or weakness.
Affected Versions
Dell iDRAC Service Module for Windows:- Before 6.1.1.0 or later is affected.
- Before 6.1.1.0 or later is affected.
- Before 6.1.1.0 or later is affected.