SQL Injection Vulnerability in Dell Unisphere for PowerMax
CVE-2025-36588

8.8HIGH

Key Information:

Vendor

Dell
Status
Unisphere For Powermax
Unisphere For Powermax Virtual Appliance
Vendor
CVE Published:
22 January 2026

What is CVE-2025-36588?

Dell Unisphere for PowerMax versions 10.2.0.x exhibit a vulnerability that arises from improper neutralization of special elements utilized in SQL commands. This flaw enables a low privileged attacker with remote access to execute arbitrary commands, potentially compromising the integrity of the system. Mitigating this vulnerability is crucial to enhance your security posture.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Unisphere for PowerMax < 9.2.4.19

Unisphere for PowerMax Virtual Appliance < 9.2.4.19

References

https://www.dell.com/support/kbdoc/en-us/000402262/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.