CVE-2026-54468
Received Received - Intake

Path Traversal in Dell Unisphere for PowerMax

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: Dell

Description
Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-10
Last Modified
2026-07-10
Generated
2026-07-10
AI Q&A
2026-07-10
EPSS Evaluated
N/A
NVD
CVE-2026-54468
EUVD
EUVD-2026-42872

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell unisphere_for_powermax to 10.3.0.5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Dell Unisphere for PowerMax, version 10.3.0.5 and earlier. It is a path traversal vulnerability that allows a low privileged attacker with remote access to potentially read arbitrary files on the system.

Impact Analysis

The vulnerability can impact you by allowing an attacker with low privileges and remote access to read arbitrary files on the affected system. This could lead to unauthorized disclosure of sensitive information.

Compliance Impact

This vulnerability allows a low privileged attacker with remote access to read arbitrary files via a path traversal flaw in Dell Unisphere for PowerMax versions 10.3.0.5 and prior.

Such unauthorized access to sensitive files could lead to exposure of personal or protected data, potentially impacting compliance with data protection regulations such as GDPR and HIPAA, which require safeguarding of sensitive information against unauthorized access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54468. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart