by Kastro
Paper/Archive/CVE-2026-103813

CVE-2026-103813

Dell PowerStore 500T — Dell PowerStore contains an OS Command Injection vulnerability.

CVSS 9.1
critical.is priorityof 100
27
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.

Affected

ProductAffectedFixed inSource
PowerStore 500T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 1000T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 1200T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 3000T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 3200Q< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 3200T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 5000T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 5200Q< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 5200T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 7000T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 9000T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA
PowerStore 9200T< 5.1.0.0-2798105 or later5.1.0.0-2798105 or laterCNA

Scores by source

dell (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

advisorydell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities