Skip to content
OpenAdvisories
Medium WID-SEC-2026-0264 4 CVEs

Dell EMC Unity: Mehrere Schwachstellen

Published Jan 29, 2026 · Updated Feb 1, 2026 · Revision 2 · de-DE

Vendor: Dell Product: EMC Unity

Summary

Ein Angreifer kann mehrere Schwachstellen in Dell EMC Unity ausnutzen, um beliebigen Code mit Root-Rechten auszuführen, Cross-Site-Scripting-Angriffe durchzuführen und Sicherheitsmaßnahmen zu umgehen.

Product

Dell EMC Unity ist eine vereinheitliche Speicherlösung.

Vulnerabilities 4

  • Critical 10.0
    CVE-2024-47875 Public exploit

    DOMPurify nesting-based mXSS

    DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.

    cure53 DOMPurify cacti argo-workflows Debian Ubuntu Wolfi npm
  • High 7.8
    CVE-2026-21418

    Dell Unity, version(s) 5.5.2 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command…

    Dell Unity
  • High 7.8
    CVE-2026-22277

    Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Comman…

    Dell UnityVSA
  • Medium 6.3
    CVE-2025-0938

    URL parser allowed square brackets in domain names

    The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture…

    Python Software Foundation CPython python3.4 python3.5 Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-5034, EUVD-2026-5032

  2. #1

    Initiale Fassung

References