# CVE-2026-35155: Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A…

Source: https://junglewise.ai/threats/cve-2026-35155-dell-idrac10-versions-1-20-70-50-and-1-30-05-10-contains-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-29  
License: CC BY 4.0 with a link back

CVE-2026-35155 · Severity: high · CVSS 7.1 · Published 2026-04-29

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.

Technologies: [Dell iDRAC10](https://junglewise.ai/threats/technologies/idrac10). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-35155 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-35155 being exploited in the wild.

**How severe is CVE-2026-35155?** High severity, with a CVSS score of 7.1, published 29 April 2026.

**Which products and versions are affected?** Dell iDRAC10, Dell Idrac10 Firmware. The advisory does not name versions.

**Is there a fix for CVE-2026-35155?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-35155?** Check whether you run Dell iDRAC10 or Dell Idrac10 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Dell iDRAC10
- Dell Idrac10 Firmware

## Related threats

- [Dell iDRAC9 and iDRAC10 OS command injection](https://junglewise.ai/threats/cve-2026-23855-dell-idrac9-and-idrac10-os-command-injection)
- [Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00…](https://junglewise.ai/threats/cve-2025-22397-dell-integrated-dell-remote-access-controller-9-14g-versions)
