Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Dell
  • Powerstore 1000t
  • Powerstore 1200t
  • Powerstore 3000t
  • Powerstore 3200q
  • Powerstore 3200t
  • Powerstore 5000t
  • Powerstore 500t
  • Powerstore 5200q
  • Powerstore 5200t
  • Powerstore 7000t
  • Powerstore 9000t
  • Powerstore 9200t

No data.

No data.

References
Link Providers
https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities cve-icon cve-icon
History

Tue, 01 Sep 2026 22:00:00 +0000

Type Values Removed Values Added
Title Argument Injection Enables Unauthorized Access to Sensitive System Information
First Time appeared Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Vendors & Products Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 01 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Description Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.
Weaknesses CWE-88
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published: 2026-09-01T14:25:17.248Z

Updated: 2026-09-01T15:29:04.640Z

Reserved: 2026-08-25T12:04:33.629Z

Link: CVE-2026-79685

cve-icon Vulnrichment

Updated: 2026-09-01T15:29:00.531Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-01T15:17:29.390

Modified: 2026-09-01T21:12:11.590

Link: CVE-2026-79685

cve-icon Redhat

No data.