CVE-2026-79682

EPSS 0.53%
Veröffentlicht 01.09.2026 15:30:07
Zuletzt bearbeitet 02.10.2026 17:29:36
Erkennungen
Login

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 9 VulnDex Vulnerability Enrichment 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Powerstoreos Version 4.1.0.0 Update build_2435323

   Dell ≫ Powerstore 1000t Version -
   Dell ≫ Powerstore 1200t Version -
   Dell ≫ Powerstore 3000t Version -
   Dell ≫ Powerstore 3200q Version -
   Dell ≫ Powerstore 3200t Version -
   Dell ≫ Powerstore 5000t Version -
   Dell ≫ Powerstore 500t Version -
   Dell ≫ Powerstore 5200q Version -
   Dell ≫ Powerstore 5200t Version -
   Dell ≫ Powerstore 7000t Version -
   Dell ≫ Powerstore 9000t Version -
   Dell ≫ Powerstore 9200t Version -

Dell ≫ Powerstoreos Version 4.1.0.1 Update build_2529516

Dell ≫ Powerstoreos Version 4.1.0.2 Update build_2567482

Dell ≫ Powerstoreos Version 4.1.0.3 Update build_2596462

Dell ≫ Powerstoreos Version 4.1.0.4 Update build_2633110

Dell ≫ Powerstoreos Version 4.1.0.5 Update build_2691357

Dell ≫ Powerstoreos Version 4.3.0.0 Update build_2611831

Dell ≫ Powerstoreos Version 4.3.1.0 Update build_2662695

Dell ≫ Powerstoreos Version 4.3.1.1 Update build_2726662

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.53%	0.425

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
EMC	8.8	2	6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-79682

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-79682

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-79682

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-79682