CVE-2026-56688

criticalCVSS 9.1covered by 1 sourcefirst seen 2026-07-10

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability during OS Repository processing to achieve arbitrary command execution as root, potentially leading to full appliance compromise and lateral movement into managed infrastructure.

⚡ Watch CVE-2026-56688

Get an email if CVE-2026-56688 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

criticalCVE-2026-56688: Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Spe…nvd · 2026-07-10

External references

NVD record for CVE-2026-56688

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-56688 status](https://www.csirts.com/badge/CVE-2026-56688)](https://www.csirts.com/cve/CVE-2026-56688)