← Back

CVE-2026-58572

nvd nist
Published: Sep 1, 2026Modified: Oct 2, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: security_alert@emc.com (Secondary)

Description

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.

Affected (9)

Products: Dell: Powerstoreos
Dell
1 product
Powerstoreos
Configuration A
9 vulnerable · 12 platform
Vulnerable SoftwareAffected Versions
Dell
Powerstoreos
Version 4.1.0.0 build_2435323
Powerstoreos
Version 4.1.0.1 build_2529516
Powerstoreos
Version 4.1.0.2 build_2567482
Powerstoreos
Version 4.1.0.3 build_2596462
Powerstoreos
Version 4.1.0.4 build_2633110
Powerstoreos
Version 4.1.0.5 build_2691357
Powerstoreos
Version 4.3.0.0 build_2611831
Powerstoreos
Version 4.3.1.0 build_2662695
Powerstoreos
Version 4.3.1.1 build_2726662
Running on/withPlatform Versions
Dell
Powerstore 1000t
All versions
Dell
Powerstore 1200t
All versions
Dell
Powerstore 3000t
All versions
Dell
Powerstore 3200q
All versions
Dell
Powerstore 3200t
All versions
Dell
Powerstore 5000t
All versions
Dell
Powerstore 500t
All versions
Dell
Powerstore 5200q
All versions
Dell
Powerstore 5200t
All versions
Dell
Powerstore 7000t
All versions
Dell
Powerstore 9000t
All versions
Dell
Powerstore 9200t
All versions

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.