CVE-2026-54470

Summary

Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected Software

VendorProductVersion RangeStatus
DellUnisphere for PowerMax0 < 10.3.0.7 or lateraffected
DellUnisphere for PowerMax0 < 10.3.1.1 Patch 11360 or lateraffected

Weaknesses

  • CWE-611: CWE-611: Improper Restriction of XML External Entity Reference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References