Command Injection Vulnerability in Dell Unisphere for PowerMax
CVE-2026-101216

6.6MEDIUM

Key Information:

Vendor

Dell
Status
Unisphere For Powermax Vapp
Vendor
CVE Published:
14 October 2026

What is CVE-2026-101216?

A command injection vulnerability exists in Dell Unisphere for PowerMax vApp versions 9.2.4.x, allowing attackers with high privileges and remote access to execute arbitrary commands on the server. By exploiting this flaw, attackers could manipulate system commands, potentially leading to unauthorized access and control over affected systems.

Affected Version(s)

Unisphere for PowerMax vApp 0 < 9.2.4.23 or later

References

https://www.dell.com/support/kbdoc/en-us/000515611/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.