CVE-2025-26336: Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware…

PriorityP264critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.59%

43.8th percentile

Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
dell	chassis_management_controller_for_poweredge_fx2_firmware	< 2.40.200.202101130302	2.40.200.202101130302
dell	chassis_management_controller_for_poweredge_vrtx_firmware	< 3.41.200.202209300499	3.41.200.202209300499
dell	dell_chassis_management_controller_for_dell_poweredge_fx2	>= N/A < 2.40.200.202101130302	2.40.200.202101130302
dell	dell_chassis_management_controller_for_poweredge_vrtx	>= N/A < 3.41.200.202209300499	3.41.200.202209300499

Detection & IOCsextracted from sources · hover to see the quote

→CVE-2025-26336 is a stack-based buffer overflow in Dell PowerEdge Chassis Management Controller (FX2 and VRTX) firmware exploitable by an unauthenticated remote attacker, enabling arbitrary code execution — detection should focus on anomalous/malformed remote management traffic to CMC interfaces ↗
→Affected firmware versions: Dell CMC for PowerEdge FX2 prior to 2.40.200.202101130302 and Dell CMC for PowerEdge VRTX prior to 3.41.200.202209300499 — inventory and alert on devices running these versions ↗

·No authentication is required to exploit this vulnerability — the attack surface is fully exposed to any remote network peer with access to the CMC management interface ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.