Cross-Site Scripting Vulnerability in Dell Unisphere for PowerMax
CVE-2026-26357

5.4MEDIUM

Key Information:

Vendor

Dell
Status
Unisphere For Powermax 9.2.4.18
Unisphere For Powermax Virtual Appliance 9.2.4.17
Vendor
CVE Published:
17 February 2026

What is CVE-2026-26357?

Dell Unisphere for PowerMax versions 9.2.4.x are vulnerable to Cross-Site Scripting (XSS), allowing low privileged attackers with remote access to execute harmful HTML or JavaScript in victim users' web browsers. This exploitation can result in various attacks, such as information disclosure, session theft, and unauthorized client-side actions, compromising the security of the web application and its users.

Affected Version(s)

Unisphere for PowerMax 9.2.4.18 < 9.2.4.19

Unisphere for PowerMax Virtual Appliance 9.2.4.17 < 9.2.4.19

References

https://www.dell.com/support/kbdoc/en-us/000402262/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.