CVE-2026-101215

Awaiting Analysis Awaiting Analysis - Queue

Improper OS Command Injection in Dell Unisphere for PowerMax vApp

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Dell

Description

Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101215

EUVD

EUVD-2026-101029

Affected Vendors & Products

Vendor	Product	Version / Range
Dell	Unisphere	for PowerMax vApp 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This is an OS Command Injection vulnerability in Dell Unisphere for PowerMax vApp version 9.2.4.x. It allows a high privileged remote attacker to execute arbitrary commands on the system by sending specially crafted input.

Detection Guidance

Detection requires checking for unauthorized remote access or unusual command execution in Dell Unisphere for PowerMax vApp. Monitor logs for suspicious activity and verify no unauthorized commands are being run.

Impact Analysis

An attacker could gain control of the affected system, steal data, install malware, or disrupt operations. Since it requires high privileges, the risk is significant if credentials are compromised.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA due to unauthorized remote execution risks. GDPR requires protection against unauthorized data access, while HIPAA mandates safeguards for sensitive health data. Exploitation may lead to data breaches or unauthorized system access, violating these regulations.

Mitigation Strategies

Immediately update Dell Unisphere for PowerMax vApp to the latest version. Restrict remote access to only trusted sources and review user privileges to ensure high-privileged accounts are properly secured.

Hi! I’m here to help you understand CVE-2026-101215. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70