CVE-2026-58574
critical · 9.8Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.
9.8
CVSS
0.6%
EPSS (exploit prob.)
50th
EPSS percentile
2026-08-31
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-306
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| dell | powerstoreos | 4.1.0.0 |
| dell | powerstoreos | 4.1.0.1 |
| dell | powerstoreos | 4.1.0.2 |
| dell | powerstoreos | 4.1.0.3 |
| dell | powerstoreos | 4.1.0.4 |
| dell | powerstoreos | 4.1.0.5 |
| dell | powerstoreos | 4.3.0.0 |
| dell | powerstoreos | 4.3.1.0 |
| dell | powerstoreos | 4.3.1.1 |
| dell | powerstore_1000t | all versions |
| dell | powerstore_1200t | all versions |
| dell | powerstore_3000t | all versions |
| dell | powerstore_3200q | all versions |
| dell | powerstore_3200t | all versions |
| dell | powerstore_5000t | all versions |
| dell | powerstore_500t | all versions |
| dell | powerstore_5200q | all versions |
| dell | powerstore_5200t | all versions |
| dell | powerstore_7000t | all versions |
| dell | powerstore_9000t | all versions |
| dell | powerstore_9200t | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-58574