---
id: CVE-2026-81472
title: >-
  Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM)
  for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to
  6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection')
  vulner…
summary: >-
  Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM)
  for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to
  6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection')
  vulner…
severity: medium
cvss: 4.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-94
vendor: Dell
product: iDRAC Service Module for Windows
affected:
  - idrac_service_module_for_windows < 6.1.1.0 or later
  - idrac_service_module_for_linux < 6.1.1.0 or later
  - idrac_service_module_for_esxi < 6.1.1.0 or later
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-29T03:57:05.070583Z'
published: '2026-10-28'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T10:45:43.551Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-81472'
references:
  - url: >-
      https://www.dell.com/support/kbdoc/en-us/000523111/dsa-2026-458-security-update-for-dell-idrac-service-module-vulnerability
tags:
  - cve.org
epss: 0.00166
epssPercentile: 0.05821
ingestedAt: '2026-10-28T12:10:35.142Z'
---

## Overview

Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versions prior to 6.1.1.0, contains an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

## Affected

- `idrac_service_module_for_windows < 6.1.1.0 or later`
- `idrac_service_module_for_linux < 6.1.1.0 or later`
- `idrac_service_module_for_esxi < 6.1.1.0 or later`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.