CVE-2026-81472 Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versio
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-81472?
CVE-2026-81472 is a medium-severity vulnerability in Dell iDRAC Service Module for ESXi, published on 28 Oct 2026.
Official description
Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Weakness: CWE-94
Which versions are affected by CVE-2026-81472?
How do I fix CVE-2026-81472?
No fix has been published for CVE-2026-81472 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-81472 being exploited?
There is no known exploitation of CVE-2026-81472 in the wild and no public exploit code.
Sources
Also known as GHSA-hp89-phq6-r7jr.