CVE-2026-58571

Summary

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Affected Software

VendorProductVersion RangeStatus
DellPowerStore 500T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 1000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 1200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3200Q0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5200Q0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 7000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 9000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 9200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 500T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 1000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 1200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3200Q0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5200Q0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 7000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 9000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 9200T0 < 4.3.1.2-2771239 or lateraffected

Weaknesses

  • CWE-78: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References