Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisioning component.
Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on provisioned SDC hosts. Exploitation may lead to full compromise of affected SDC hosts.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Dell Technologies
- Product
- Terraform Provider for Dell PowerFlex
- CVSS v3.1
- 6.6 AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-78
- Exposure class
- Developer platform, Storage / NAS, OT / ICS
- NVD status
- Received
Why it ranks 23 (Routine)
- CVSS v3.1 6.6 medium
- Product class: developer platform, storage / NAS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-68862 on this site · NVD · CVE.org · Vulnpedia