CVE-2026-70412 describes a remanent data readable after memory erase vulnerability in Dell iDRAC9 and iDRAC10 management interfaces. Specifically, versions before 7.20.30.50 for iDRAC9 and before 1.20.60.50 for iDRAC10 are affected. A low privileged attacker with remote access could exploit this flaw to gain unauthorized access to residual data that should have been erased, leading to information disclosure. The CVSS 3.1 base score is 3.5, indicating low impact primarily on confidentiality. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

The vulnerability allows information disclosure due to residual data being readable after memory erase. This could expose sensitive information to a low privileged remote attacker. There is no indication of impact on integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit remote access to affected iDRAC interfaces and monitor for unusual activity. Follow Dell's official channels for updates on patches or mitigations.