Dell iDRAC Tools Privilege Escalation Vulnerability (CVE-2026-28262)

DSA-2026-239: Dell iDRAC Tools Vulnerability Security Update Vulnerability Overview A privilege escalation vulnerability exists in Dell iDRAC Tools, which may be exploited by malicious users to compromise affected systems. Affected Products Affected Product: Dell iDRAC Tools Affected Versions: Versions prior to 11.4.1.0 CVSS Score: 6.0 Remediation Fixed Version: 11.4.1.0 or later Fix Link: https://www.dell.com/support/home/en-yy/drivers/driversdetails?driverid=8wiyf Vulnerability Details CVE Number: CVE-2026-28262 Vulnerability Description: Versions of Dell iDRAC Tools prior to 11.4.1.0 contain a "Link Resolution Before File Access" vulnerability. A low-privileged attacker with local access may exploit this vulnerability to cause data tampering. Revision History Revision Version: 1.0 Date: 2026-06-08 Description: Initial release Acknowledgments Dell Technologies thanks falconCorrup for reporting this issue. Related Links Dell Security Advisories and Notifications Dell Vulnerability Response Policy CVSS Scoring Guidelines Legal Disclaimer The information in this Dell Technologies security advisory should be read and used to help avoid situations that may arise from the issues described herein. Dell Technologies distributes security advisories to communicate important security information to users of affected products. Dell Technologies assesses risk based on a diverse collection of installed systems and may not represent the actual risk of your local installation and individual environment. It is recommended that all users determine the applicability of this information to their individual environment and take appropriate action. This information is provided "as is" without warranty of any kind. Dell Technologies expressly disclaims all warranties, whether express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, title, and non-infringement. Under no circumstances shall Dell Technologies, its affiliates, or suppliers be liable for any damages arising out of the use or inability to use the information contained herein or actions taken based on such decisions, including any direct, indirect, incidental, consequential, lost business profits, or special damages, even if Dell Technologies, its affiliates, or suppliers have been advised of the possibility of such damages. Some jurisdictions do not allow the exclusion or limitation of liability for consequential or incidental damages, so the above limitations may apply to you to the extent permitted by law.

Goal Reached Thanks to every supporter — we hit 100%!

Dell iDRAC Tools Privilege Escalation Vulnerability (CVE-2026-28262)