8.8Yüksek
CVE-2026-26359
Açıklama
Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files.
Zayıflık türü (CWE):
CWE-73
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Dell | PowerMax | N/A – < 10.3.0.1 or later | |
| Dell | Unisphere for PowerMax | N/A – < 10.3.0.1 or later |
Kaynaklar ve yamalar
- https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-… vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*< 10.3.0.1cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:eem:*:*:*< 10.3.0.1