CVE-2026-54470 describes an Improper Restriction of XML External Entity Reference vulnerability in Dell Unisphere for PowerMax, affecting version 10.3.0.5 and prior. This vulnerability could be exploited remotely by an attacker with low privileges to gain unauthorized access. The CVSS 3.1 base score is 5.3, with network attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently available.

Exploitation of this vulnerability could lead to unauthorized access to sensitive information due to improper handling of XML external entities. The confidentiality impact is high, but integrity and availability are not affected. The attack requires remote network access with low privileges and has high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to the affected system and monitor for suspicious activity related to XML processing. Follow Dell's official communications for updates on patches or mitigations.