OS Command Injection Vulnerability in Dell UnityVSA Products
CVE-2026-22277

7.8HIGH

Key Information:

Vendor

Dell
Status
Unityvsa
Vendor
CVE Published:
30 January 2026

What is CVE-2026-22277?

Dell UnityVSA products, specifically version 5.4 and earlier, are exposed to an OS command injection vulnerability. This flaw arises from improper handling of special elements which could allow a low privileged attacker with local access to execute arbitrary commands with root privileges. Organizations using these products should implement security measures to mitigate potential exploitation and review the vendor's advisory for mitigation steps.

Affected Version(s)

UnityVSA < 5.5.3

References

https://www.dell.com/support/kbdoc/en-us/000421197/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.