CVE-2026-56688: OS Command Injection
Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability during OS Repository processing to achieve arbitrary command execution as root, potentially leading to full appliance compromise and lateral movement into managed infrastructure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell PowerFlex Managerto a version that resolves this vulnerability.Fixed in 5.1.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56688?
The severity of CVE-2026-56688 is classified as critical with a score of 9.1.
How do I fix CVE-2026-56688?
To fix CVE-2026-56688, upgrade to Dell PowerFlex Manager version 5.1.0.1 or later.
What type of vulnerability is CVE-2026-56688?
CVE-2026-56688 is an OS Command Injection vulnerability.
Who can exploit CVE-2026-56688?
A high privileged attacker with remote access can exploit CVE-2026-56688.
What software is affected by CVE-2026-56688?
The affected software is Dell PowerFlex Manager versions prior to 5.1.0.1.