7.8
High
CVE-2026-22277 Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command…
Description
Dell UnityVSA, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| UnityVSA 5.5 | earliest → < 5.5.3 | 5.5.3 |