8.1High
CVE-2026-26360
Description
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files.
Weakness (CWE):
CWE-73
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Dell | PowerMax | N/A – < 10.3.0.1 or later | |
| Dell | Unisphere for PowerMax | N/A – < 10.3.0.1 or later |
References and patches
- https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-… vendor-advisoryVendor Advisory
CPE matches (NVD) (2)
cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*< 10.3.0.1cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:eem:*:*:*< 10.3.0.1