🚨High - Dell Unisphere for PowerMax Deserialization RCE as Root (CVE-2026-54469) Dell Unisphere for PowerMax (10.3.0.5 and prior) contains a deserialization of untrusted data flaw. A low-privileged attacker with remote access can exploit it to achieve arbitrary command execution with root privileges on the management console. Since Unisphere manages enterprise PowerMax storage arrays, root-level code execution on the console is high-impact for the entire storage fabric it controls. Only a low-privileged authenticated account is required, with no user interaction (CVSS 8.8). 👉Upgrade to Unisphere for PowerMax 10.3.0.7+ or 10.3.1.1 Patch 11360+ (Dell DSA-2026-272).
Post summary
Dell has announced a high‑severity deserialization RCE (CVE‑2026‑54469) in Unisphere for PowerMax that allows low‑privileged remote attackers to execute arbitrary commands as root, and urges users to apply Patch 11360+ (upgrade to 10.3.0.7+ or 10.3.1.1).
