EUVD-2026-69143
GHSA-q9qp-pp6x-v5rw
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-accessible management plane requires only a low-privilege credential; full CIA impact reflects complete storage system compromise upon privilege escalation.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and gain escalated privileges.
AnalysisAI
Privilege escalation in Dell PowerStore storage appliances allows any authenticated low-privilege user to bypass access restriction controls and gain elevated system privileges, classified under CWE-693 (Protection Mechanism Failure). The entire PowerStore T-series and Q-series lineup is affected, with a network-accessible, low-complexity attack path requiring only a valid account. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privilege account on the Dell PowerStore management interface, which must be reachable over the network (AV:N, PR:L per CVSS). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 score is consistent with the attack profile: network-reachable, no complexity, no user interaction, only a low-privilege credential required, with full confidentiality, integrity, and availability impact upon success. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult Dell advisory DSA-2026-330 at https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities for the exact patched PowerStore OS version and upgrade procedure, as no specific fix version is derivable from the available CPE data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify and inventory all PowerStore T-series and Q-series deployments in your infrastructure and contact Dell support to confirm patch timeline and availability; restrict network access to PowerStore management interfaces to authorized administrators only. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Powerstore 500T
View allRemote code execution and denial of service in Dell PowerStore T-series arrays (SDNAS software) stem from an out-of-boun
Unauthenticated information disclosure in Dell PowerStore T-series storage appliances allows an attacker with network ac
Elevation of privilege in Dell PowerStore storage appliances allows a remote, low-privileged attacker to bypass authoriz
Command injection in Dell PowerStore storage appliances allows an authenticated low-privileged local user to execute arb
Privilege escalation to root on Dell PowerStore storage appliances allows an authenticated user with limited privileges
Privilege escalation in Dell PowerStore enterprise storage appliances allows authenticated low-privileged users to bypas
OS command injection in Dell PowerStore storage appliances enables a locally authenticated user with limited privileges
Code injection in Dell PowerStore storage appliances (500T through 7000T series and potentially additional models) allow
Privilege escalation to Administrator level is possible on Dell PowerStore storage appliances through an authentication
Privilege escalation in Dell PowerStore storage appliances allows an authenticated low-privilege user to invoke administ
Buffer overflow in Dell PowerStore SDNAS's NFS/RPC subsystem exposes the entire PowerStore appliance line (500T through
Missing authorization enforcement in Dell PowerStore storage appliances allows any attacker who has gained control of a
Same weakness CWE-693 – Protection Mechanism Failure
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today