CVE-2026-26033

MEDIUM

UPS MUMC 01.06.0001 - Privilege Escalation

Title source: llm

Description

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a directory on the system drive to execute arbitrary code with SYSTEM privileges.

References (2)

Scores

CVSS v3 6.7
EPSS 0.0001
EPSS Percentile 2.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-428
Status published

Affected Products (1)

dell/ups_multi-ups_management_console

Timeline

Published Mar 05, 2026
Tracked Since Mar 05, 2026