CVE record · CVE-2025-26482

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.

CVSS 4.9 MediumEPSS 0.0030 · 23rd percentile

Published by the CVE Program (CNA: dell) at 25 Sept 2025, 21:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Dell	PowerEdge R770	affected N/A to before 1.2.6 semver Other versions: unaffected
Dell	PowerEdge R670	affected N/A to before 1.2.6 semver Other versions: unaffected
Dell	PowerEdge R570	affected N/A to before 1.2.6 semver Other versions: unaffected
Dell	PowerEdge R470	affected N/A to before 1.2.6 semver Other versions: unaffected
Dell	PowerEdge R6715	affected N/A to before 1.1.2 semver Other versions: unaffected
Dell	PowerEdge R7715	affected N/A to before 1.1.2 semver Other versions: unaffected
Dell	PowerEdge R6725	affected N/A to before 1.1.3 semver Other versions: unaffected
Dell	PowerEdge R7725	affected N/A to before 1.1.3 semver Other versions: unaffected
Dell	PowerEdge R660	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge R760	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge C6620	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge MX760c	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge R860	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge R960	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge HS5610	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge HS5620	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge R660xs	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge R760xs	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge R760xd2	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge T560	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge R760xa	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XE9680	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XE9680L	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XR5610	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XR8610t	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XR8620t	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XR7620	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XE8640	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge XE9640	affected N/A to before 2.5.4 semver Other versions: unaffected
Dell	PowerEdge T160	affected N/A to before 2.0.0 semver Other versions: unaffected
Dell	PowerEdge T360	affected N/A to before 2.0.0 semver Other versions: unaffected
Dell	PowerEdge R260	affected N/A to before 2.0.0 semver Other versions: unaffected
Dell	PowerEdge R360	affected N/A to before 2.0.0 semver Other versions: unaffected
Dell	PowerEdge R650	affected N/A to before 1.16.2 semver Other versions: unaffected
Dell	PowerEdge R750	affected N/A to before 1.16.2 semver Other versions: unaffected
Dell	PowerEdge R750XA	affected N/A to before 1.16.2 semver Other versions: unaffected
Dell	PowerEdge C6520	affected N/A to before 1.16.2 semver Other versions: unaffected
Dell	PowerEdge MX750C	affected N/A to before 1.16.2 semver Other versions: unaffected
Dell	PowerEdge R550	affected N/A to before 1.16.2 semver Other versions: unaffected
Dell	PowerEdge R450	affected N/A to before 1.16.2 semver Other versions: unaffected

And 74 more products. The full list is on the CVE record.

Identifiers: CVE-2025-26482
CNA: dell
Weakness (CWE): CWE-1258
Tags: Dell PowerEdge R770
Dell PowerEdge R670
Dell PowerEdge R570
Dell PowerEdge R470
Dell PowerEdge R6715
Dell PowerEdge R7715
Dell PowerEdge R6725
Dell PowerEdge R7725
CWE-1258
Published: 25 Sept 2025
Updated: 26 Sept 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
4.9	Medium	3.1	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	CNA (dell)

CISA KEV Not listed.
EPSS 0.0030, the 23rd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2025. New records show when each source confirmed them.

Sources

References from the CNA

www.dell.com/support/kbdoc/en-us/000370138/dsa-2025-046-security-update-for-dell-poweredge-server-and-dell-idrac9-for-information-disclosure-vulnerability vendor-advisory

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.