Lucene search
+L

287 matches found

Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.10 views

PT-2026-84226

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description A protection mechanism failure allows an authenticated user with limited privileges to bypass access restrictions and gain escalated privileges. Recommendations At the moment, there i...

8.8CVSS5.7AI score0.00349EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.9 views

PT-2026-84225

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An authenticated user with limited privileges can exploit a code injection flaw to execute arbitrary code with root privileges. Code injection is a type of attack where an attacker...

8.8CVSS6.4AI score0.00187EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.10 views

PT-2026-84147

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An incorrect authorization issue allows an authenticated attacker with low privileges to invoke operations reserved for administrators, resulting in privilege escalation...

8.8CVSS5.7AI score0.00286EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.11 views

PT-2026-84247

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An OS Command Injection issue exists where an authenticated user with limited privileges can execute arbitrary commands with root privileges. OS Command Injection is a flaw that allow...

8.8CVSS6.4AI score0.00942EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/31 7:17 a.m.9 views

CVE-2026-58574

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...

9.8CVSS0.00336EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/31 6:28 a.m.44 views

CVE-2026-58574

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...

9.8CVSS0.00336EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/31 6:28 a.m.6 views

EUVD-2026-68368

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a...

9.8CVSS5.9AI score0.00336EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/31 6:28 a.m.42 views

CVE-2026-58574

Dell PowerStore is affected by a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface can read internal system information from the appliance filesystem. This may expose sensitive information and credent...

9.8CVSS5.9AI score0.00336EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/31 12:00 a.m.29 views

PT-2026-83706

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An unauthenticated attacker with network access to the restricted management interface can exploit a missing authentication for critical function flaw to read internal system...

9.8CVSS5.9AI score0.00336EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/18 6:19 p.m.11 views

CVE-2026-67262

Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass...

8.1CVSS0.00252EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/18 5:24 p.m.26 views

CVE-2026-67262

Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass...

8.1CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/18 5:24 p.m.38 views

CVE-2026-67262

Dell PowerStore has a Missing Authorization flaw allowing an attacker with mapped-host access to read or write LUNs beyond per-initiator access controls, enabling confidentiality, integrity, and availability impacts (CVSS 8.1 HIGH). Dell DSA-2026-330 advisory is referenced, but no affected versio...

8.1CVSS5.5AI score0.00252EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 5:24 p.m.17 views

EUVD-2026-61073

Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass...

8.1CVSS5.5AI score0.00252EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/18 5:17 p.m.7 views

CVE-2026-70415

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service...

8.1CVSS0.00704EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/18 5:17 p.m.14 views

CVE-2026-67271

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a speciall...

9.8CVSS0.00462EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 4:54 p.m.10 views

EUVD-2026-61058

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service...

8.1CVSS5.8AI score0.00704EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/18 4:54 p.m.31 views

CVE-2026-70415

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service...

8.1CVSS0.00704EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/18 4:54 p.m.44 views

CVE-2026-70415

Dell PowerStore SDNAS has a buffer-copy flaw in its NFS/RPC stack, exploitable by an unauthenticated remote attacker to achieve command execution and DoS. CVSS 3.1 scores it HIGH (8.1). Dell advisory DSA-2026-330 covers the fix; no in-the-wild exploitation is reported. Apply Dell's security updat...

8.1CVSS6AI score0.00704EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/18 4:44 p.m.19 views

EUVD-2026-61049

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a...

9.8CVSS5.7AI score0.00462EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/18 4:44 p.m.58 views

CVE-2026-67271

Dell PowerStore SDNAS has an out-of-bounds write in its SMB/CIFS handler. An unauthenticated remote attacker can send a crafted SMB packet to trigger a persistent crash (DoS) or achieve remote code execution (CVSS 9.8 Critical, no auth required). No in-the-wild exploitation is documented. Dell ad...

9.8CVSS6.2AI score0.00462EPSS
SaveExploits0References1
Rows per page
Query Builder