CVE-2026-68862

Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host provisioning component. A high privileged remote attacker with access to the PowerFlex management plane could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on provisioned SDC hosts. Exploitation may lead to full compromise of affected SDC hosts.

• CWE-78

• https://www.dell.com/support/kbdoc/en-in/000515434/dsa-2026-433-security-update-for-dell-terraform-provider-for-dell-storage-multiple-vulnerabilities

Published

Nov 11, 2026

Last Modified

Nov 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-68850Heap-based buffer overflow in Microsoft Account allows an au…7.8
• CVE-2026-68851Buffer over-read in Windows NTFS allows an authorized attack…5.5
• CVE-2026-68852Use of uninitialized resource in Microsoft Account allows an…5.5
• CVE-2026-6886Borg SPM 2007 (Sales Ended in 2008) developed by BorG Techno…9.8
• CVE-2026-68860Dell PowerProtect Data Manager, versions 20.2.0.0 and below,…6.8
• CVE-2026-68861Dell PowerProtect One, versions 20.1.0.0 and below, contain …8.8
• CVE-2026-68863Dell PowerProtect One, versions 20.1.0.0 and below, contain …7.5
• CVE-2026-68866PowerProtect Data Domain, Feature Release versions 7.7.1.0 t…6.5
• CVE-2026-68868The Google Cloud Secret Manager secrets backend in Apache Ai…6.5
• CVE-2026-68869Rejected reason: This CVE ID was assigned in error. Upon fur…
• CVE-2026-6887Borg SPM 2007 (Sales Ended in 2008) developed by BorG Techno…9.8
• CVE-2026-68870The Azure Key Vault secrets backend in Apache Airflow's Micr…5.3