Is CVE-2026-56415 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56415?

CVE-2026-56415 has a CVSS v3 severity of CRITICAL (10).

Back

CVE-2026-56415

Description

Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a specially crafted HTTP request containing a malicious payload that is processed without adequate input sanitization, resulting in arbitrary command execution with root-level privileges on the underlying system.