CVE-2026-67261: Dell Virtual Storage Integrator for VMware vSphere Client vulnerability
Dell · Virtual Storage Integrator for VMware vSphere Client
Vendor fix available · Affected: Dell Virtual Storage Integrator for VMware vSphere Client · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
Higher than 83% of scored CVEs
DescriptionNVD
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying operating system with root privileges. Exploitation may lead to a complete system takeover by an attacker. This vulnerability is considered critical as it allows an unauthenticated remote attacker to achieve arbitrary code execution as root, potentially compromising the entire VSI deployment and underlying infrastructure. Dell recommends customers to upgrade at the earliest opportunity.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Dell
- Published
- August 2026
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 12 Aug.
- Dell VSI flaw CVE-2026-67261 lets attackers run code remotelySecurityOnline · first in our coverage
New articles also arrive in the RSS feed.