VulnerabilityAwaiting Analysis

CVE-2026-101216

Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.

MEDIUM 6.6EPSS 1.08%

Does this matter?

Lower severity and a low EPSS score (1.08%). Track it; it rarely justifies an emergency change on its own.

Description

Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

CVSS 3.1: 6.6 MEDIUMCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.08% probability · 65th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-77
Source: security_alert@emc.com

EPSS trend

EPSS moved from 1.1% on 15 October 2026 to 1.1% on 26 October 2026.

References

https://www.dell.com/support/kbdoc/en-us/000515611/dsa-2026-447-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-solutions-enabler-and-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.