CVE-2026-58574
Summary
| CVE | CVE-2026-58574 |
|---|---|
| State | PUBLISHED |
| Assigner | dell |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-08-31 07:17:44 UTC |
| Updated | 2026-10-01 13:34:28 UTC |
| Description | Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array. |
Risk And Classification
Primary CVSS: v3.1 9.8 CRITICAL from [email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.006250000 probability, percentile 0.481520000 (date 2026-10-04)
Problem Types: CWE-306 | CWE-306 CWE-306: Missing Authentication for Critical Function
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | CNA | CVSS | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Dell | Powerstoreos | 4.1.0.0 | build_2435323 | All | All |
| Operating System | Dell | Powerstoreos | 4.1.0.1 | build_2529516 | All | All |
| Operating System | Dell | Powerstoreos | 4.1.0.2 | build_2567482 | All | All |
| Operating System | Dell | Powerstoreos | 4.1.0.3 | build_2596462 | All | All |
| Operating System | Dell | Powerstoreos | 4.1.0.4 | build_2633110 | All | All |
| Operating System | Dell | Powerstoreos | 4.1.0.5 | build_2691357 | All | All |
| Operating System | Dell | Powerstoreos | 4.3.0.0 | build_2611831 | All | All |
| Operating System | Dell | Powerstoreos | 4.3.1.0 | build_2662695 | All | All |
| Operating System | Dell | Powerstoreos | 4.3.1.1 | build_2726662 | All | All |
| Hardware | Dell | Powerstore 1000t | - | All | All | All |
| Hardware | Dell | Powerstore 1200t | - | All | All | All |
| Hardware | Dell | Powerstore 3000t | - | All | All | All |
| Hardware | Dell | Powerstore 3200q | - | All | All | All |
| Hardware | Dell | Powerstore 3200t | - | All | All | All |
| Hardware | Dell | Powerstore 5000t | - | All | All | All |
| Hardware | Dell | Powerstore 500t | - | All | All | All |
| Hardware | Dell | Powerstore 5200q | - | All | All | All |
| Hardware | Dell | Powerstore 5200t | - | All | All | All |
| Hardware | Dell | Powerstore 7000t | - | All | All | All |
| Hardware | Dell | Powerstore 9000t | - | All | All | All |
| Hardware | Dell | Powerstore 9200t | - | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Dell | PowerStore 500T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 1000T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 1200T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 3000T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 3200Q | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 3200T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 5000T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 5200Q | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 5200T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 7000T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 9000T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 9200T | affected 4.1.0.6-2771237 or later semver | Not specified |
| CNA | Dell | PowerStore 500T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 1000T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 1200T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 3000T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 3200Q | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 3200T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 5000T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 5200Q | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 5200T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 7000T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 9000T | affected 4.3.1.2-2771239 or later semver | Not specified |
| CNA | Dell | PowerStore 9200T | affected 4.3.1.2-2771239 or later semver | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-... | [email protected] | www.dell.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.