CVE-2026-58574

EPSS 0.34%
Veröffentlicht 31.08.2026 06:28:45
Zuletzt bearbeitet 01.10.2026 13:34:28
Erkennungen
Login

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 9 VulnDex Vulnerability Enrichment 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Powerstoreos Version 4.1.0.0 Update build_2435323

   Dell ≫ Powerstore 1000t Version -
   Dell ≫ Powerstore 1200t Version -
   Dell ≫ Powerstore 3000t Version -
   Dell ≫ Powerstore 3200q Version -
   Dell ≫ Powerstore 3200t Version -
   Dell ≫ Powerstore 5000t Version -
   Dell ≫ Powerstore 500t Version -
   Dell ≫ Powerstore 5200q Version -
   Dell ≫ Powerstore 5200t Version -
   Dell ≫ Powerstore 7000t Version -
   Dell ≫ Powerstore 9000t Version -
   Dell ≫ Powerstore 9200t Version -

Dell ≫ Powerstoreos Version 4.1.0.1 Update build_2529516

Dell ≫ Powerstoreos Version 4.1.0.2 Update build_2567482

Dell ≫ Powerstoreos Version 4.1.0.3 Update build_2596462

Dell ≫ Powerstoreos Version 4.1.0.4 Update build_2633110

Dell ≫ Powerstoreos Version 4.1.0.5 Update build_2691357

Dell ≫ Powerstoreos Version 4.3.0.0 Update build_2611831

Dell ≫ Powerstoreos Version 4.3.1.0 Update build_2662695

Dell ≫ Powerstoreos Version 4.3.1.1 Update build_2726662

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.34%	0.263

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
EMC	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-58574

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-58574

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-58574

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-58574