Content Injection Vulnerability in Dell PowerStore
CVE-2026-82174

4.3MEDIUM

Key Information:

Vendor

Dell
Status
Powerstore 500t
Powerstore 1000t
Powerstore 1200t
Powerstore 3000t
Vendor
CVE Published:
13 November 2026

What is CVE-2026-82174?

Dell PowerStore is affected by a content-injection vulnerability that allows an unauthenticated attacker to manipulate the genuine login page, potentially misleading users into entering sensitive information. By exploiting this flaw, attackers can craft deceptive messages that appear legitimate, increasing the risk of phishing attacks. Organizations must ensure their systems are updated to mitigate this security risk.

Affected Version(s)

PowerStore 1000T 0 < 5.1.0.0-2798105 or later

PowerStore 1200T 0 < 5.1.0.0-2798105 or later

PowerStore 1500 0 < 5.1.0.0-2798105 or later

References

https://www.dell.com/support/kbdoc/en-us/000527640/dsa-20...
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.