CVE-2022-26866

Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged network attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.

• CWE-79
• CWE-79

• https://www.dell.com/support/kbdoc/000196367Vendor Advisory
• https://www.dell.com/support/kbdoc/000196367Vendor Advisory

Published

Jun 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26860Dell BIOS versions contain a stack-based buffer overflow vul…7.8
• CVE-2022-26861Dell BIOS versions contain an Insecure Automated Optimizatio…7.8
• CVE-2022-26862Prior Dell BIOS versions contain an Input Validation vulnera…7.8
• CVE-2022-26863Prior Dell BIOS versions contain an Input Validation vulnera…7.8
• CVE-2022-26864Prior Dell BIOS versions contain an Input Validation vulnera…7.8
• CVE-2022-26865Dell Support Assist OS Recovery versions before 5.5.2 contai…6.8
• CVE-2022-26867PowerStore SW v2.1.1.0 supports the option to export data to…8
• CVE-2022-26868Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x a…7.8
• CVE-2022-26869Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contai…9.8
• CVE-2022-2687A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-26870Dell PowerStore versions 2.1.0.x contain an Authentication b…9.8
• CVE-2022-26871An arbitrary file upload vulnerability in Trend Micro Apex C…9.8