Security Advisory

CVE-2026-56415

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-30 22:40:55

Last updated 2026-07-01 12:42:03

Assigner icscert

CVSS score 10.0

State PUBLISHED

Description

Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a specially crafted HTTP request containing a malicious payload that is processed without adequate input sanitization, resulting in arbitrary command execution with root-level privileges on the underlying system.

← Browse all CVEs View on cve.org ↗