CVE-2026-26357

🗓️ 17 Feb 2026 19:41:10Reported by dellType

Dell Unisphere for PowerMax 9.2.4.x has a cross-site scripting flaw allowing remote low-privilege attackers to run code in a victim's browser.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-26357	17 Feb 202619:41	–	attackerkb
CNNVD	Dell Unisphere for PowerMax 跨站脚本漏洞	17 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-26357	17 Feb 202619:41	–	cvelist
NVD	CVE-2026-26357	17 Feb 202620:22	–	nvd
Positive Technologies	PT-2026-20353	17 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-26357	19 Feb 202601:27	–	redhatcve
Vulnrichment	CVE-2026-26357	17 Feb 202619:41	–	vulnrichment

Vulners

Node

dell unisphere_for_powermax_9.2.4.18Range≤9.2.4.19

dell unisphere_for_powermax_virtual_appliance_9.2.4.17Range≤9.2.4.19

[
  {
    "defaultStatus": "unaffected",
    "product": "Unisphere for PowerMax 9.2.4.18",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "9.2.4.19",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Unisphere for PowerMax Virtual Appliance 9.2.4.17",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "9.2.4.19",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000402262/dsa-2025-425-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtual-appliance-dell-unisphere-360-dell-solutions-enabler-virtual-appliance-security-update-for-multiple-vulnerabilities

15 Apr 2026 00:35Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.4

EPSS0.00045

SSVC

CWE-79