Missing Authentication Vulnerability in Dell PowerStore
CVE-2026-58574

9.8CRITICAL

Key Information:

Vendor

Dell
Status
Powerstore 500t
Powerstore 1000t
Powerstore 1200t
Powerstore 3000t
Vendor
CVE Published:
31 August 2026

What is CVE-2026-58574?

The Dell PowerStore has a vulnerability that allows an unauthenticated attacker with network access to its restricted management interface to exploit missing authentication mechanisms. This can lead to unauthorized reading of sensitive internal system information, including potentially exposing credentials. Consequently, this puts the administrative access of the appliance at significant risk, necessitating immediate attention to secure affected systems.

Affected Version(s)

PowerStore 1000T 0 < 4.1.0.6-2771237 or later

PowerStore 1000T 0 < 4.3.1.2-2771239 or later

PowerStore 1200T 0 < 4.1.0.6-2771237 or later

References

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-20...
vendor-advisory

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.