CVEvulnerability

CVE-2026-58574

9.8 CRITICAL Published 2026-08-31 Modified 2026-10-01 Official page ↗
Status
Analyzed
Published
2026-08-31
Last modified
2026-10-01
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306

Description

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

Affected configurations

• dell powerstoreos 4.1.0.0 • dell powerstoreos 4.1.0.1 • dell powerstoreos 4.1.0.2 • dell powerstoreos 4.1.0.3 • dell powerstoreos 4.1.0.4 • dell powerstoreos 4.1.0.5 • dell powerstoreos 4.3.0.0 • dell powerstoreos 4.3.1.0 • dell powerstoreos 4.3.1.1

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References