CVE-2026-58575

Summary

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.

Affected Software

VendorProductVersion RangeStatus
DellPowerStore 500T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 1000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 1200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3200Q0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5200Q0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 7000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 9000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 9200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 500T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 1000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 1200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3200Q0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5200Q0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 7000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 9000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 9200T0 < 4.3.1.2-2771239 or lateraffected

Weaknesses

  • CWE-290: CWE-290: Authentication Bypass by Spoofing

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References