HOMEVULNERABILITIESCVE-2026-26945
MEDIUM

CVE-2026-26945

CWE-114Published: March 18, 2026· Updated: Mar 19, 2026

5.3
CVSS v3.1
EPSS:0.04%probability of exploitation in 30 daysPercentile:12.7th

Official Description

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain a Process Control vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to code execution.

NVD Source

Technical Analysis

CVE-2026-26945 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 5.3.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorAdjacent
Attack ComplexityHigh
Privileges Req.High
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityHigh
AvailabilityLow
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L

Affected Vendors & Products

Mentioned vendors (from description):
Dell
CPE data not yet available in NVD for this CVE.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
External links open in a new tab. Always verify in a controlled environment before use.

All References (1)

Quick Facts

CVE IDCVE-2026-26945
CVSS Score5.3 / 10
SeverityMEDIUM
WeaknessCWE-114
CISA KEVNo
EPSS (30d)0.04%
PublishedMar 18, 2026

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2026-26945 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.