CVE-2022-26868

Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system takeover by an attacker.

• CWE-78
• CWE-78

• https://www.dell.com/support/kbdoc/000196367Vendor Advisory
• https://www.dell.com/support/kbdoc/000196367Vendor Advisory

Published

Jun 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26862Prior Dell BIOS versions contain an Input Validation vulnera…7.8
• CVE-2022-26863Prior Dell BIOS versions contain an Input Validation vulnera…7.8
• CVE-2022-26864Prior Dell BIOS versions contain an Input Validation vulnera…7.8
• CVE-2022-26865Dell Support Assist OS Recovery versions before 5.5.2 contai…6.8
• CVE-2022-26866Dell PowerStore Versions before v2.1.1.0. contains a Stored …5.5
• CVE-2022-26867PowerStore SW v2.1.1.0 supports the option to export data to…8
• CVE-2022-26869Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contai…9.8
• CVE-2022-2687A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-26870Dell PowerStore versions 2.1.0.x contain an Authentication b…9.8
• CVE-2022-26871An arbitrary file upload vulnerability in Trend Micro Apex C…9.8
• CVE-2022-26872AMI Megarac Password reset interception via API8.8
• CVE-2022-26873A potential attacker can execute an arbitrary code at the ti…8.2