Dell PowerStore CVE-2026-58574

Exploitation requires network reachability to the PowerStore appliance's restricted/dedicated management interface; no authentication, credentials, or user interaction are needed once that interface is reachable (AV:N/AC:L/PR:N/UI:N). The primary limiting factor is therefore network position: in deployments where the management interface is properly segmented onto an isolated management network, only hosts on or routed to that segment can exploit the flaw, so a flat or exposed management network dramatically widens the attack surface. The affected deployment is Dell PowerStore T-series appliances (500T-9200T); no non-default feature toggle is stated as required - the missing-authentication weakness is in the management interface itself.

This is a genuine high-priority issue rather than an inflated CVSS score: the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H reflects unauthenticated, low-complexity network exploitation with no user interaction, and Dell (the vendor and reporter) rates it Critical because the leaked data contains credentials that yield full array control. The main tempering factor is that exploitation targets the restricted management interface, which in a well-segmented environment is isolated from general networks - meaning realistic exposure depends heavily on whether the management plane is properly firewalled. No EPSS score, POC, or CISA KEV entry was provided, so there is no evidence of active or automated exploitation yet; the absence of these signals lowers the immediate widespread-attack probability but does not reduce the severity if an attacker already has management-network access. Given that a single unauthenticated request can expose administrative credentials for an entire storage array, any operator running these appliances should treat patching as urgent, especially where the management interface may be reachable beyond a tightly controlled segment.

An attacker who can reach the PowerStore restricted management interface - for example a malicious insider on the management VLAN, or an external attacker who has pivoted onto it - sends unauthenticated requests to the vulnerable filesystem-read function and retrieves internal system files. Those files contain administrative credentials, which the attacker then uses to log in with full control over the storage array and its hosted volumes. No public exploit is identified at time of analysis, but the low attack complexity makes weaponization straightforward for anyone with management-network access.