CVE-2026-54469

Summary

Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Affected Software

VendorProductVersion RangeStatus
DellUnisphere for PowerMax0 < 10.3.0.7 or lateraffected
DellUnisphere for PowerMax0 < 10.3.1.1 Patch 11360 or lateraffected

Weaknesses

  • CWE-502: CWE-502: Deserialization of Untrusted Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References