CVE-2026-101216: Command Injection
Published Oct 14, 2026
·Updated
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Affected Software
1 affected component
Dell Unisphere for PowerMax vApp=9.2.4.x
Event History
Oct 14, 2026
CVE Published
via MITRE·01:44 PM
Data Sourced
via MITRE·01:44 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
Exploitation requires a high-privileged attacker with remote access to the affected Dell Unisphere for PowerMax vApp.
2
Which deployments are identified as affected?
The affected product is Dell Unisphere for PowerMax vApp version 9.2.4.x.
3
What is the potential impact of successful exploitation?
A successful exploit could lead to remote code execution, with potential impact to confidentiality, integrity, and availability.