PT-2026-5386 · Dell · Dell Unity

Published 2026-01-30 · Updated 2026-01-30 · CVE-2026-21418

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Unity versions prior to 5.5.2

Description Dell Unity versions 5.5.2 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') issue. A local attacker with low privileges could potentially exploit this, leading to arbitrary command execution with root privileges.

Recommendations Update to a version newer than 5.5.2.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-21418

Affected Products

Dell Unity

References · 7

• https://osv.dev/vulnerability/CVE-2026-21418 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21418 · Security Note
• https://dell.com/support/kbdoc/en-us/000421197/dsa-2026-054-security-update-for-dell-unity-dell-unityvsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://t.me/CVEtracker/43271 · Telegram Post
• https://twitter.com/CVEnew/status/2017162953657569779 · Twitter Post
• https://t.me/cveNotify/150375 · Telegram Post
• https://twitter.com/vuldb/status/2017166948619231511 · Twitter Post