CVE-2026-26359

EPSS 0.38%
Veröffentlicht 19.02.2026 08:34:01
Zuletzt bearbeitet 20.02.2026 20:58:50
Erkennungen
Login

Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Unisphere For Powermax Version < 10.3.0.1

Dell ≫ Unisphere For Powermax SwEdition eem Version < 10.3.0.1

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.291

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
EMC	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-73 External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-security-update-for-multiple-vulnerabilities

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-26359

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-26359

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-26359

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-26359