# Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. CVE record · `CVE-2025-26482` - **Identifiers:** `CVE-2025-26482` - **State:** Confirmed - **Severity:** CVSS 4.9 Medium - **Critical:** No - **CNA:** dell - **Weakness (CWE):** [CWE-1258](https://cwe.mitre.org/data/definitions/1258.html) - **Tags:** [CWE-1258](https://agentprime.io/advisories/tag/cwe-1258.md) - **Technologies:** [Dell PowerEdge R770](https://agentprime.io/advisories/technology/dell-poweredge-r770.md) · [Dell PowerEdge R670](https://agentprime.io/advisories/technology/dell-poweredge-r670.md) · [Dell PowerEdge R570](https://agentprime.io/advisories/technology/dell-poweredge-r570.md) · [Dell PowerEdge R470](https://agentprime.io/advisories/technology/dell-poweredge-r470.md) · [Dell PowerEdge R6715](https://agentprime.io/advisories/technology/dell-poweredge-r6715.md) · [Dell PowerEdge R7715](https://agentprime.io/advisories/technology/dell-poweredge-r7715.md) · [Dell PowerEdge R6725](https://agentprime.io/advisories/technology/dell-poweredge-r6725.md) · [Dell PowerEdge R7725](https://agentprime.io/advisories/technology/dell-poweredge-r7725.md) · [Dell PowerEdge R660](https://agentprime.io/advisories/technology/dell-poweredge-r660.md) · [Dell PowerEdge R760](https://agentprime.io/advisories/technology/dell-poweredge-r760.md) · [Dell PowerEdge C6620](https://agentprime.io/advisories/technology/dell-poweredge-c6620.md) · [Dell PowerEdge MX760c](https://agentprime.io/advisories/technology/dell-poweredge-mx760c.md) · [Dell PowerEdge R860](https://agentprime.io/advisories/technology/dell-poweredge-r860.md) · [Dell PowerEdge R960](https://agentprime.io/advisories/technology/dell-poweredge-r960.md) · [Dell PowerEdge HS5610](https://agentprime.io/advisories/technology/dell-poweredge-hs5610.md) · [Dell PowerEdge HS5620](https://agentprime.io/advisories/technology/dell-poweredge-hs5620.md) · [Dell PowerEdge R660xs](https://agentprime.io/advisories/technology/dell-poweredge-r660xs.md) · [Dell PowerEdge R760xs](https://agentprime.io/advisories/technology/dell-poweredge-r760xs.md) · [Dell PowerEdge R760xd2](https://agentprime.io/advisories/technology/dell-poweredge-r760xd2.md) · [Dell PowerEdge T560](https://agentprime.io/advisories/technology/dell-poweredge-t560.md) - **Published:** 25 Sept 2025 - **Updated:** 26 Sept 2025 - **Reviewed by a person:** No Published by the CVE Program (CNA: dell) at 25 Sept 2025, 21:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. ## Affected products, as the CNA wrote them - Vendor: Dell. Product: PowerEdge R770. - affected: `N/A to before 1.2.6` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R670. - affected: `N/A to before 1.2.6` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R570. - affected: `N/A to before 1.2.6` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R470. - affected: `N/A to before 1.2.6` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R6715. - affected: `N/A to before 1.1.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R7715. - affected: `N/A to before 1.1.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R6725. - affected: `N/A to before 1.1.3` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R7725. - affected: `N/A to before 1.1.3` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R660. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R760. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge C6620. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge MX760c. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R860. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R960. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge HS5610. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge HS5620. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R660xs. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R760xs. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R760xd2. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge T560. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R760xa. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XE9680. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XE9680L. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XR5610. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XR8610t. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XR8620t. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XR7620. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XE8640. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge XE9640. - affected: `N/A to before 2.5.4` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge T160. - affected: `N/A to before 2.0.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge T360. - affected: `N/A to before 2.0.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R260. - affected: `N/A to before 2.0.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R360. - affected: `N/A to before 2.0.0` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R650. - affected: `N/A to before 1.16.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R750. - affected: `N/A to before 1.16.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R750XA. - affected: `N/A to before 1.16.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge C6520. - affected: `N/A to before 1.16.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge MX750C. - affected: `N/A to before 1.16.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R550. - affected: `N/A to before 1.16.2` (semver) - Other versions: unaffected - Vendor: Dell. Product: PowerEdge R450. - affected: `N/A to before 1.16.2` (semver) - Other versions: unaffected And 74 more products. The full list is on the CVE record: ## Not analysed yet We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter. ## Severity and exploitation - 4.9 Medium, CVSS 3.1: `CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N`, from CNA (dell) - **CISA KEV:** Not listed. - **EPSS:** 0.0030, the 23rd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days. ## Timeline This record came from the full history of the CVE Program, published 25 Sept 2025. New records show when each source confirmed them. ## Sources - [CVE List: CVE-2025-26482](https://www.cve.org/CVERecord?id=CVE-2025-26482) - [NVD: CVE-2025-26482](https://nvd.nist.gov/vuln/detail/CVE-2025-26482) ### References from the CNA - (vendor-advisory) Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description. ## Check whether this affects you This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run. - With the agentprime MCP server (), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: - As JSON: - Everything that needs attention now: --- The web page: . Everything for agents: .