MDR
Solutions
Partners
About
Resources
Dell
March 25, 2026
Vulnerabilities in multiple third‑party components may enable remote code execution, privilege escalation, unauthorized access, data disclosure, or DoS. If unpatched, compromised SRM/SMR instances can provide attackers with a foothold in environments where these products monitor or manage storage.
Dell SRM
Apply vendor patch
Dell Storage Resource Manager and Dell Storage Monitoring and Reporting are affected when running versions prior to 6.0.0.2. Both Vapp and Windows/Linux deployments using bundled third‑party components such as SUSE, Tomcat, Java, Go, and MySQL are in scope.
Compromised SRM/SMR systems could disrupt storage monitoring and reporting, reducing visibility of storage health and performance. Attackers gaining privileged access via SRM/SMR may impact the stability or integrity of connected storage environments.
SRM and SMR ship with multiple third‑party components that contain known vulnerabilities tracked under the listed CVEs. These components include SUSE Linux Enterprise Server, Apache Tomcat, Java, Commons Compress, Go, and MySQL, which require vendor updates.
Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.
Discuss Your Security ExposureExplore Third Party Risk ManagementAssess your risk
Identify affected systems
Plan remediation
Practical, vendor-aligned guidance
Get expert support
From our 24/7 security team
Get the latest threat intelligence and security advisories from Smarttech247.
View All Threat UpdatesDownload the complete analysis, including detailed technical findings and references.
Dell advisory DSA‑2026‑111 and product download pages provide official update packages and details for SRM and SMR. Additional vulnerability information is available from NVD and CISA for the referenced CVEs and affected third‑party components.
.jpg)