What is the CVSS score of CVE-2026-26358?

CVE-2026-26358 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Unisphere For Powermax are affected by CVE-2026-26358?

Dell Unisphere for PowerMax version 10.2 contains a critical authorization flaw that allows low-privileged attackers to gain unauthorized access to storage infrastructure remotely.

How to fix or mitigate CVE-2026-26358?

Within 24 hours: Identify all systems running Unisphere 10.2 and restrict network access to administrative interfaces using firewall rules. Within 7 days: Implement network segmentation to isolate affected PowerMax systems and enable enhanced logging/monitoring for unauthorized access attempts. Within 30 days: Upgrade to a patched version when available from Dell, or engage Dell support for a mitigation roadmap if upgrades are not feasible.

Unisphere For Powermax CVE-2026-26358

HIGH

Missing Authorization (CWE-862)

2026-02-19 security_alert@emc.com

Authentication Bypass Dell Unisphere For Powermax

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:03 vuln.today

CVE Published

Feb 19, 2026 - 09:16 nvd

HIGH 8.8

DescriptionCVE.org

Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

AnalysisAI

Dell Unisphere for PowerMax 10.2 lacks proper authorization checks, allowing authenticated remote attackers to bypass access controls and gain unauthorized administrative capabilities. This missing authorization vulnerability (CWE-862) affects users who have any valid account credentials on affected systems. No patch is currently available, making this a critical risk for organizations operating vulnerable PowerMax installations.

Technical ContextAI

Classified as CWE-862 (Missing Authorization). Affects Unisphere For Powermax. Dell Unisphere for PowerMax, version(s) 10.2, contain(s) a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.