CVE-2026-35155 is a high-severity vulnerability affecting Dell iDRAC10 versions 1.20.70.50 and 1.30.05.10. It involves insufficient protection of credentials stemming from a race condition that could be exploited by an authenticated low-privileged attacker to gain elevated access. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, user interaction required, and impacts confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by Dell, and no known exploits are reported.

An authenticated attacker with low privileges could exploit this vulnerability to escalate their privileges, potentially gaining high-level access to the affected system. This could compromise confidentiality, integrity, and availability of the system managed via Dell iDRAC10. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to Dell iDRAC10 interfaces to trusted administrators only and monitor for unusual authentication activity. Avoid exposing iDRAC interfaces to untrusted networks.