CVE-2026-26033

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write access to a directory on the system drive to execute arbitrary code with SYSTEM privileges.

Score

CVSS 4.0 8.4 High

Status

Analyzed - vultures@jpcert.or.jp

Published

2026-03-05

Last modified

2026-03-05

Weaknesses

CWE-428

Affected products

• Ups Multi-ups Management Console (Dell)
• Ups Multi-ups Management Console Mumc (Dell Inc.)

References

• https://jvn.jp/en/jp/JVN56544509/
• https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3