Product:
Unisphere for PowerMax
Summary
Dell Unisphere for PowerMax contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files. This poses a significant risk as it can lead to data loss and system instability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2026-26360 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can manipulate file paths to delete arbitrary files on the system. This can be achieved by sending specially crafted requests to the application, which may not properly validate the file paths, allowing the attacker to bypass security controls.
Affected Products
- Unisphere for PowerMax 10.2 – Contains a vulnerability that allows remote attackers to delete arbitrary files.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Dell. It is also recommended to review access controls and limit remote access to the application to trusted users only.