CVE-2026-54468
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A path traversal vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior allows a low-privileged attacker with remote access to read arbitrary files on the system.
Risk Assessment
The risk involves potential leakage of sensitive data such as configurations, passwords, or customer data, which could lead to a security breach for the organization.
Recommendation
It is recommended to immediately upgrade Dell Unisphere for PowerMax to a version later than 10.3.0.5 and restrict network access to the system only to trusted hosts.
Other vulnerabilities in Dell Unisphere for PowerMax
See all- CVE-2025-36589High
Dell Unisphere for PowerMax, versions 9.2.4.x, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could exploit this, leading to unauthorized access to data and resources outside the intended control sphere.
- CVE-2026-54470Medium
A vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior allows a low-privileged attacker to remotely exploit improper restriction of XML external entity references (XXE). This could lead to unauthorized access to the system.
- CVE-2026-54469High
Deserialization of untrusted data vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior. A low-privileged attacker with remote access can exploit this to execute arbitrary commands with root privileges.
Original NVD description (English source)
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files.