CVE-2025-36589 Dell CVE debrief

Who should care

Defenders responsible for Dell Unisphere for PowerMax systems, remote access security, and XML processing security should assess exposure and potential impact. This includes security teams, IT administrators, and operators who manage Dell Unisphere for PowerMax deployments. They should prioritize verifying remote access controls and XML processing security to prevent unauthorized access to data and resources.

Why it matters

Defenders should prioritize verifying exposure and assessing potential impact of the Improper Restriction of XML External Entity Reference vulnerability in Dell Unisphere for PowerMax, focusing on remote access controls and XML processing security.

• Verify remote access controls to prevent unauthorized access
• Assess XML processing security to prevent external entity reference attacks
• Monitor for potential data breaches and resource exploitation
• Update access controls to limit low-privileged user access

Technical summary

The vulnerability exists in Dell Unisphere for PowerMax version 9.2.4.x and allows a low privileged attacker with remote access to potentially exploit the vulnerability, leading to unauthorized access to data and resources. The Improper Restriction of XML External Entity Reference vulnerability can be exploited by attackers to access sensitive data and resources. Defenders should prioritize verifying exposure and assessing potential impact, focusing on remote access controls and XML processing security. The vulnerability has a CVSS score of 7.6 and is considered HIGH severity.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on remote access controls and XML processing security.

Recommended defensive actions

• Verify exposure by checking if Dell Unisphere for PowerMax version 9.2.4.x is in use
• Assess remote access controls and XML processing security
• Review and update access controls to limit low-privileged user access
• Monitor for potential unauthorized access to data and resources
• Apply vendor patches or updates as available
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions. Evidence is limited to publicly available information from these sources. Defenders should verify the affected version of Dell Unisphere for PowerMax and review remote access controls and XML processing security. The CVE record was published on 2026-01-06T17:15:43.780Z and has not been modified since then.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.