by Kastro
Paper/Archive/CVE-2026-58574

CVE-2026-58574

Dell PowerStore 500T — Dell PowerStore contains a Missing Authentication for Critical Function vulnerability.

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 50.0.500 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

Affected

ProductAffectedFixed inSource
PowerStore 500T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 1000T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 1200T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 3000T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 3200Q< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 3200T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 5000T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 5200Q< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 5200T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 7000T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 9000T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA
PowerStore 9200T< 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterCNA

Scores by source

dell (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorydell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities