Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Dell
  • Powerstore 1000t
  • Powerstore 1200t
  • Powerstore 3000t
  • Powerstore 3200q
  • Powerstore 3200t
  • Powerstore 5000t
  • Powerstore 500t
  • Powerstore 5200q
  • Powerstore 5200t
  • Powerstore 7000t
  • Powerstore 9000t
  • Powerstore 9200t

No data.

No data.

References
Link Providers
https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities cve-icon cve-icon
History

Tue, 01 Sep 2026 22:00:00 +0000

Type Values Removed Values Added
Title Dell PowerStore Authenticated Code Injection Leading to Root Privilege Escalation
First Time appeared Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Vendors & Products Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 01 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Description Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
Weaknesses CWE-94
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published: 2026-09-01T13:25:05.912Z

Updated: 2026-09-02T03:55:43.865Z

Reserved: 2026-07-01T11:04:36.019Z

Link: CVE-2026-58572

cve-icon Vulnrichment

Updated: 2026-09-01T15:27:28.033Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-01T14:17:37.470

Modified: 2026-09-02T04:17:59.493

Link: CVE-2026-58572

cve-icon Redhat

No data.