CVE-2026-70412

mediumCVSS 3.5covered by 2 sourcesfirst seen 2026-08-17

An attacker can exploit multiple vulnerabilities in Dell integrated Dell Remote Access Controller to perform a denial of service attack and to disclose confidential information.

CSIRTS triage

What: Multiple vulnerabilities allow denial of service and disclosure of confidential information.
Who is affected: Systems with Dell iDRAC; affects out-of-band management interfaces.
Urgency: Medium severity; dos and information disclosure on management interface warrant timely patching to prevent unauthorized access.
Action: Apply security patches for Dell iDRAC firmware.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-70412

Get an email if CVE-2026-70412 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all EPSS-scored CVEs.

Advisory coverage (2)

medium[NEW] [medium] Dell integrated Dell Remote Access Controller: Multiple vulnerabilitiescert-bund · 2026-08-18
lowCVE-2026-70412: Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, cont…nvd · 2026-08-17

External references

NVD record for CVE-2026-70412

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-70412 status](https://www.csirts.com/badge/CVE-2026-70412)](https://www.csirts.com/cve/CVE-2026-70412)