External Control of File Name or Path Vulnerability in Dell Unisphere for PowerMax
CVE-2026-26361

6.5MEDIUM

Key Information:

Vendor

Dell
Status
Unisphere For Powermax
Powermax
Vendor
CVE Published:
19 February 2026

What is CVE-2026-26361?

Dell's Unisphere for PowerMax version 10.2 is susceptible to an external control of file name or path vulnerability. This flaw allows low privileged attackers with remote access to exploit the vulnerability, facilitating potential information disclosure. It is essential for users to apply security updates forthwith to mitigate risks associated with this vulnerability.

Affected Version(s)

PowerMax < 10.3.0.1 or later

Unisphere for PowerMax < 10.3.0.1 or later

References

https://www.dell.com/support/kbdoc/en-us/000429268/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.