CVE-2026-35155 is a vulnerability in Dell iDRAC10 versions 1.20.70.50 and 1.30.05.10 involving insufficiently protected credentials caused by a race condition. An authenticated attacker with low privileges could exploit this flaw to escalate their access privileges. The CVSS 3.1 base score is 7.1, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-522 (Insufficiently Protected Credentials). No patch or official remediation level has been published by Dell as of the current data.

Successful exploitation could allow an authenticated low-privileged attacker to gain elevated access, potentially compromising confidentiality, integrity, and availability of the affected system. This could lead to unauthorized administrative control over the iDRAC10 management interface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the iDRAC management interface to trusted administrators only and monitor for suspicious activity. Avoid using affected versions if possible.