CVE-2026-26357 | BDVDB-2026-315739 Detail

Description#

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-02-17Record published in the CVE List.
2. Version 22026-03-06Most recent update recorded in the CVE List.