Back Tenable

CVE-2026-26357 | Tenable®

Tenable • February 18, 2026

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.

Published : 2026-02-17

Vector : CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

Vector : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Cross-Site Scripting Vulnerabilities Discovered in Web Applications Recent vulnerabilities have been identified in various web applications, including SVXportal and Dell Unisphere for PowerMax. These vulnerabilities allow unauthenticated remote attackers to inject and execute arbitrary JavaScript in victims' browsers, potentially leading to session theft and information disclosure. The vulnerabilities were published between February 17 and February 20, 2026. 17 sources 35

Extracted Entities

CVE-2026-26357 | Tenable®

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)