Skip to content
OpenAdvisories
High · 7.6 CVE-2025-36589 EUVD-2026-1003GHSA-mjf9-xjp8-6cr8

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low p…

Published Jan 6, 2026 · Updated Jan 6, 2026 · Assigned by dell

Description

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data and resources outside of the intended sphere of control.

Affected products

VendorProductAffectedFixed
Dell Unisphere for PowerMax N/A – < 9.2.4.19 9.2.4.19

References