CVE-2026-58571

EPSS 0.94%
Veröffentlicht 01.09.2026 13:52:50
Zuletzt bearbeitet 02.10.2026 17:29:28
Erkennungen
Login

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 9 VulnDex Vulnerability Enrichment 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Powerstoreos Version 4.1.0.0 Update build_2435323

   Dell ≫ Powerstore 1000t Version -
   Dell ≫ Powerstore 1200t Version -
   Dell ≫ Powerstore 3000t Version -
   Dell ≫ Powerstore 3200q Version -
   Dell ≫ Powerstore 3200t Version -
   Dell ≫ Powerstore 5000t Version -
   Dell ≫ Powerstore 500t Version -
   Dell ≫ Powerstore 5200q Version -
   Dell ≫ Powerstore 5200t Version -
   Dell ≫ Powerstore 7000t Version -
   Dell ≫ Powerstore 9000t Version -
   Dell ≫ Powerstore 9200t Version -

Dell ≫ Powerstoreos Version 4.1.0.1 Update build_2529516

Dell ≫ Powerstoreos Version 4.1.0.2 Update build_2567482

Dell ≫ Powerstoreos Version 4.1.0.3 Update build_2596462

Dell ≫ Powerstoreos Version 4.1.0.4 Update build_2633110

Dell ≫ Powerstoreos Version 4.1.0.5 Update build_2691357

Dell ≫ Powerstoreos Version 4.3.0.0 Update build_2611831

Dell ≫ Powerstoreos Version 4.3.1.0 Update build_2662695

Dell ≫ Powerstoreos Version 4.3.1.1 Update build_2726662

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.94%	0.586

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
EMC	8.8	2	6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-58571

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-58571

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-58571

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-58571