CVE-2026-26358Disclosure(dell / unisphere_for_powermax)

LOWCVSS 8.8 · HIGH

Signal is active with 6 mentions in latest observed window

Immediate actions

Patch dell unisphere_for_powermax systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

dell CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.dell.com/support/kbdoc/en-us/000429268/dsa-2026-102-dell-unisphere-for-powermax-and-powermax-eem-security-update-for-multiple-vulnerabilities

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

unisphere_for_powermax

Threat summary

Patch or workaround signal is available
6 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 5 signals
Disclosure: 4 classified signals
General: 1 classified signal
6 total mentions across 1 day

Affected systems

Vendors

dell

Products

unisphere_for_powermax

Deep dive

Activity timeline6 mentions / 1d

Signal classification3 categories

Disclosure

466.7%

General

116.7%

Patch

116.7%

Referenced assets6 URLs

By indicator

Full discourse6 posts

The Hacker Wire@TheHackerWire232d
Disclosure
🟠 CVE-2026-26358 - High Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, lead... https://www.thehackerwire.com/vulnerability/CVE-2026-26358/ https://t.co/elfznV59r3
Post summary
The text announces a high‑severity Missing Authorization flaw in Dell Unisphere for PowerMax version 10.2, noting that a low‑privileged remote attacker could potentially exploit it.
0000032
112 followersView on X
CVETodo@CveTodo232d
Disclosure
**CVE-2026-26358** pertains to Dell Unisphere for PowerMax versions 10.2, which contains a **Missing Authorization** vulnerability. This flaw allows a low-privileged attacker with remote access to potentially exploit the system to gain unauthorized access. Essentially, the system does not properly enforce access controls, allowing an attacker to perform actions or access data beyond their intended permissions. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #AuthBypass https://cvetodo.com/cve/CVE-2026-26358
Post summary
Dell Unisphere for PowerMax 10.2 has a missing authorization vulnerability allowing remote low‑privilege attackers to gain unauthorized access.
0000027
20 followersView on X
OffSeq | Adversary Tactics for Cyber Resilience@offseq232d
Disclosure
🚨 HIGH severity alert: Dell Unisphere for PowerMax 10.2 has a missing authorization flaw. Remote low-priv users can gain unauthorized access — protect your storage! 🛡️ Restrict access & monitor now. Details: https://radar.offseq.com/threat/cve-2026-26358-cwe-862-missing-author... https://t.co/Z7k38TKc81
Post summary
High severity missing authorization flaw in Dell Unisphere for PowerMax 10.2 allows remote low‑priv users unauthorized access; mitigation is recommended by restricting access.
0000032
265 followersView on X
OffSeq | Adversary Tactics for Cyber Resilience@offseq232d
Patch
⚠️ HIGH severity in Dell Unisphere for PowerMax: CVE-2026-26358 lets low-priv users bypass authorization & access sensitive storage functions remotely. Patch ASAP & lock down management interfaces! https://radar.offseq.com/threat/cve-2026-26358-cwe-862-missing-authorization-in... https://t.co/CI0CQiTxYT
Post summary
A high‑severity CVE (CVE‑2026‑26358) in Dell Unisphere for PowerMax allows low‑privilege users to bypass authorization and access sensitive storage functions remotely; the tweet urges an immediate patch and management interface lockdown.
0000036
265 followersView on X
VulDB 🛡@vuldb232d
General
There is a new vulnerability with elevated criticality in Dell Unisphere for PowerMax and PowerMax (CVE-2026-26358) https://vuldb.com/?id.346741
Post summary
A brief note announces a new high‑severity CVE (CVE‑2026‑26358) for Dell Unisphere/PowerMax, but offers no additional details.
0000057
2.1K followersView on X
CVE@CVEnew232d
Disclosure
CVE-2026-26358 Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit… https://www.cve.org/CVERecord?id=CVE-2026-26358
Post summary
Dell Unisphere for PowerMax version 10.2 suffers from a missing authorization flaw that could enable low‑privileged remote attackers to exploit the system, as documented in CVE-2026-26358.
0000064
56.4K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	dell	unisphere_for_powermax	-	-	-
App	dell	unisphere_for_powermax	-	-	-

Explore more

Back to dashboard dell CVEs unisphere_for_powermax vulnerabilities

What researchers are saying

CVE-2026-26358

CVETodo[verified]@CveTodoDisclosure

Dell Unisphere for PowerMax 10.2 has a missing authorization vulnerability allowing remote low‑privilege attackers to gain unauthorized access.

OffSeq | Adversary Tactics for Cyber Resilience[verified]@offseqDisclosure

High severity missing authorization flaw in Dell Unisphere for PowerMax 10.2 allows remote low‑priv users unauthorized access; mitigation is recommended by restricting access.

OffSeq | Adversary Tactics for Cyber Resilience[verified]@offseqPatch

A high‑severity CVE (CVE‑2026‑26358) in Dell Unisphere for PowerMax allows low‑privilege users to bypass authorization and access sensitive storage functions remotely; the tweet urges an immediate patch and management interface lockdown.

The Hacker Wire@TheHackerWireDisclosure

The text announces a high‑severity Missing Authorization flaw in Dell Unisphere for PowerMax version 10.2, noting that a low‑privileged remote attacker could potentially exploit it.

VulDB 🛡@vuldbGeneral

A brief note announces a new high‑severity CVE (CVE‑2026‑26358) for Dell Unisphere/PowerMax, but offers no additional details.

CVE@CVEnewDisclosure

Dell Unisphere for PowerMax version 10.2 suffers from a missing authorization flaw that could enable low‑privileged remote attackers to exploit the system, as documented in CVE-2026-26358.