CVE-2026-54469
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Deserialization of untrusted data vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior. A low-privileged attacker with remote access can exploit this to execute arbitrary commands with root privileges.
Risk Assessment
Risk of full system compromise by a low-privileged attacker, potentially leading to data theft, service disruption, or further attacks on the infrastructure.
Recommendation
Immediately upgrade Dell Unisphere for PowerMax to a version later than 10.3.0.5 and restrict network access to the system to trusted hosts only.
Other vulnerabilities in Dell Unisphere for PowerMax
See all- CVE-2026-54470Medium
A vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior allows a low-privileged attacker to remotely exploit improper restriction of XML external entity references (XXE). This could lead to unauthorized access to the system.
- CVE-2026-54468Medium
A path traversal vulnerability in Dell Unisphere for PowerMax versions 10.3.0.5 and prior allows a low-privileged attacker with remote access to read arbitrary files on the system.
- CVE-2025-36589High
Dell Unisphere for PowerMax, versions 9.2.4.x, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could exploit this, leading to unauthorized access to data and resources outside the intended control sphere.
Original NVD description (English source)
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS