CVE-2026-79682

Summary

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Affected Software

VendorProductVersion RangeStatus
DellPowerStore 500T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 1000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 1200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3200Q0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 3200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5200Q0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 5200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 7000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 9000T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 9200T0 < 4.1.0.6-2771237 or lateraffected
DellPowerStore 500T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 1000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 1200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3200Q0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 3200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5200Q0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 5200T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 7000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 9000T0 < 4.3.1.2-2771239 or lateraffected
DellPowerStore 9200T0 < 4.3.1.2-2771239 or lateraffected

Weaknesses

  • CWE-77: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References