Dell Unisphere For Powermax vulnerabilities

15 CVEs affecting Dell Unisphere For Powermax, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-54470, published 2026-07-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-54469, published 2026-07-10. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this…
CVE-2021-21531, published 2021-04-30. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform…
CVE-2025-36588, published 2026-01-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with…
CVE-2026-26362, published 2026-02-19. High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to…
CVE-2026-26359, published 2026-02-19. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this…
CVE-2026-26360, published 2026-02-19. High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this…
CVE-2026-26358, published 2026-02-19. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to…
CVE-2026-54468, published 2026-07-10. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to…
CVE-2026-26361, published 2026-02-19. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this…
CVE-2021-36338, published 2022-01-21. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges…

Latest

CVE-2026-54470, published 2026-07-10. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could…
CVE-2025-36589, published 2026-01-06. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially…