CVE-2026-26034 Details
Description
UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL.
A vulnerability exists in Dell UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03), released in January 2013. This vulnerability, categorized as Incorrect Default Permissions (CWE-276), allows an attacker to execute arbitrary code with SYSTEM privileges. The issue arises when the application is manipulated to load a specially crafted DLL.
Users are advised to stop using Dell UPS Multi-UPS Management Console, as the product is no longer supported. The latest version of the software can be downloaded from the Dell Support website.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://jvn.jp/en/jp/JVN56544509/ | [email protected] | Third Party Advisory |
| https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=038h3 | [email protected] | Product |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-428 | Unquoted Search Path or Element | [email protected] |
| CWE-276 | Incorrect Default Permissions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| dell ups multi-ups management console | 01.06.0001_(a03) |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 9, 2026 | Initial Analysis | [email protected] |
| Mar 5, 2026 | New CVE Received | [email protected] |