CVE-2026-54469
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Deserialization of untrusted data vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior. A low-privileged attacker with remote access can exploit this to execute arbitrary commands with root privileges.
Risk Assessment
Risk of full system compromise by a low-privileged attacker, potentially leading to data theft, service disruption, or further attacks on the infrastructure.
Recommendation
Immediately upgrade Dell Unisphere for PowerMax to a version later than 10.3.0.5 and restrict network access to the system to trusted hosts only.
Other vulnerabilities in Dell Unisphere for PowerMax
See all- CVE-2025-36589High
Dell Unisphere for PowerMax, versions 9.2.4.x, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could exploit this, leading to unauthorized access to data and resources outside the intended control sphere.
- CVE-2026-54470Medium
A vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior allows a low-privileged attacker to remotely exploit improper restriction of XML external entity references (XXE). This could lead to unauthorized access to the system.
- CVE-2026-54468Medium
A path traversal vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior allows a low-privileged attacker with remote access to read arbitrary files on the system.
Original NVD description (English source)
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.