CVE-2026-79685

EPSS 0.22%
Veröffentlicht 01.09.2026 14:25:17
Zuletzt bearbeitet 02.10.2026 17:26:09
Erkennungen
Login

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 9 VulnDex Vulnerability Enrichment 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Dell ≫ Powerstoreos Version 4.1.0.0 Update build_2435323

   Dell ≫ Powerstore 1000t Version -
   Dell ≫ Powerstore 1200t Version -
   Dell ≫ Powerstore 3000t Version -
   Dell ≫ Powerstore 3200q Version -
   Dell ≫ Powerstore 3200t Version -
   Dell ≫ Powerstore 5000t Version -
   Dell ≫ Powerstore 500t Version -
   Dell ≫ Powerstore 5200q Version -
   Dell ≫ Powerstore 5200t Version -
   Dell ≫ Powerstore 7000t Version -
   Dell ≫ Powerstore 9000t Version -
   Dell ≫ Powerstore 9200t Version -

Dell ≫ Powerstoreos Version 4.1.0.1 Update build_2529516

Dell ≫ Powerstoreos Version 4.1.0.2 Update build_2567482

Dell ≫ Powerstoreos Version 4.1.0.3 Update build_2596462

Dell ≫ Powerstoreos Version 4.1.0.4 Update build_2633110

Dell ≫ Powerstoreos Version 4.1.0.5 Update build_2691357

Dell ≫ Powerstoreos Version 4.3.0.0 Update build_2611831

Dell ≫ Powerstoreos Version 4.3.1.0 Update build_2662695

Dell ≫ Powerstoreos Version 4.3.1.1 Update build_2726662

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.122

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
EMC	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-79685

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-79685

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-79685

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-79685