Dell Powerstoreos vulnerabilities

24 CVEs affecting Dell Powerstoreos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-79687, published 2026-09-01.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-26869, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information…
• CVE-2022-22556, published 2022-06-02. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to…
• CVE-2026-79682, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root…
• CVE-2026-58567, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root…
• CVE-2026-58571, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root…
• CVE-2022-26870, published 2022-10-21. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability under specific configuration. An…
• CVE-2026-58574, published 2026-08-31. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit…
• CVE-2022-26867, published 2022-06-02. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, authenticated user…
• CVE-2023-32478, published 2023-07-21. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malicious user could potentially exploit this vulnerability,…
• CVE-2026-58575, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.

Latest

• CVE-2026-79687, published 2026-09-01. Critical severity, CVSS 10.0. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to…
• CVE-2026-79686, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and…
• CVE-2026-79685, published 2026-09-01. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive…
• CVE-2026-58569, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to…
• CVE-2026-79684, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to bypass access restrictions and…
• CVE-2026-58572, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
• CVE-2026-79683, published 2026-09-01. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to write attacker-controlled content…