Product:
Unisphere for PowerMax
Summary
Dell Unisphere for PowerMax contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access. This issue poses a significant risk due to its high impact on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2026-26358 |
Exploitation
To exploit this vulnerability, an attacker with low privileges can remotely access the affected system. By leveraging the missing authorization controls, the attacker can gain unauthorized access to sensitive data and functionalities within the Unisphere for PowerMax application.
Affected Products
- Unisphere for PowerMax: A management interface for PowerMax storage systems that is affected by a missing authorization vulnerability.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Users should ensure that their systems are updated to the latest version to protect against unauthorized access and potential exploitation.