CVE-2026-26034

UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL.

Score

CVSS 4.0 8.5 High

Status

Analyzed - vultures@jpcert.or.jp

Published

2026-03-05

Last modified

2026-03-05

Weaknesses

CWE-276, CWE-428

Affected products

• Ups Multi-ups Management Console (Dell)
• Ups Multi-ups Management Console Mumc (Dell Inc.)

References

• https://jvn.jp/en/jp/JVN56544509/
• https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3