CVE-2025-26336

—

CVSS 3.1

9.8 critical

EPSS

<1%p48

Published

Mar 21, 2025 (Mar 21, 2025)

Modified

Jun 17, 2026

Description

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Vendors: dell
Products: chassis management controller for poweredge fx2 firmware, chassis management controller for poweredge vrtx firmware
Weakness: CWE-121, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.