OS Command Injection Vulnerability in Dell Unisphere for PowerMax
CVE-2026-101215

6.6MEDIUM

Key Information:

Vendor

Dell
Status
Unisphere For Powermax Vapp
Vendor
CVE Published:
14 October 2026

What is CVE-2026-101215?

The Dell Unisphere for PowerMax vApp versions 9.2.4.x is susceptible to an OS Command Injection vulnerability. This flaw allows a high-privileged attacker with remote access to execute arbitrary operating system commands on the affected device. By exploiting this vulnerability, an attacker could gain control over the system and compromise the integrity and confidentiality of the data processed by the application.

Affected Version(s)

Unisphere for PowerMax vApp 0 < 9.2.4.23 or later

References

https://www.dell.com/support/kbdoc/en-us/000515611/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.