CVE-2026-28265
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
- Score
- CVSS 3.1 7.1 High
- Status
- Analyzed - security_alert@emc.com
- Published
- 2026-04-01
- Last modified
- 2026-10-26
- Weaknesses
- CWE-22, CWE-35
Affected products
- Powerstore (Dell)
- Powerstore 1000t (Dell)
- Powerstore 1200t (Dell)
- Powerstore 3000t (Dell)
- Powerstore 3200q (Dell)
- Powerstore 3200t (Dell)
- Powerstore 5000t (Dell)
- Powerstore 500t (Dell)
- Powerstore 5200q (Dell)
- Powerstore 5200t (Dell)
- Powerstore 7000t (Dell)
- Powerstore 9000t (Dell)
- Powerstore 9200t (Dell)
- Powerstoreos (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000444169/dsa-2026-157-dell-powerstore-t-security-update-for-multiple-vulnerab…
