CVE-2026-101216

Awaiting Analysis Awaiting Analysis - Queue

Command Injection in Dell Unisphere for PowerMax vApp

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Dell

Description

Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101216

EUVD

EUVD-2026-101026

Affected Vendors & Products

Vendor	Product	Version / Range
Dell	Unisphere	for PowerMax vApp 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This is a command injection vulnerability in Dell Unisphere for PowerMax vApp version 9.2.4.x. It allows a high-privileged attacker with remote access to execute arbitrary commands on the system by injecting malicious input.

Detection Guidance

Detection requires checking Dell Unisphere for PowerMax vApp version 9.2.4.x for signs of command injection attempts. Monitor logs for unusual remote commands or unexpected system changes. No specific commands are provided in the context.

Impact Analysis

An attacker could gain full control over the affected system, leading to unauthorized data access, modification, or deletion. This could disrupt operations and compromise sensitive information stored on the system.

Compliance Impact

This vulnerability could lead to unauthorized access or exposure of personal or health data, violating GDPR or HIPAA requirements. Organizations may face legal penalties, reputational damage, and loss of compliance certifications.

Mitigation Strategies

Update Dell Unisphere for PowerMax vApp to the latest version to address the command injection vulnerability. Restrict remote access to only trusted networks and users. Monitor network traffic for unusual activity and implement strict input validation for commands.

Hi! I’m here to help you understand CVE-2026-101216. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70