Strix
60.4K

CVE-2026-58574

CRITICALCVSS 9.8/10EPSS 0.34%

Last modified

CVE-2026-58574 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

Metrics

CVSS 3.1
9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.34%

26.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
DellPowerStore 500T< 4.1.0.6-2771237 or later
DellPowerStore 1000T< 4.1.0.6-2771237 or later
DellPowerStore 1200T< 4.1.0.6-2771237 or later
DellPowerStore 3000T< 4.1.0.6-2771237 or later
DellPowerStore 3200Q< 4.1.0.6-2771237 or later
DellPowerStore 3200T< 4.1.0.6-2771237 or later
DellPowerStore 5000T< 4.1.0.6-2771237 or later
DellPowerStore 5200Q< 4.1.0.6-2771237 or later
DellPowerStore 5200T< 4.1.0.6-2771237 or later
DellPowerStore 7000T< 4.1.0.6-2771237 or later
DellPowerStore 9000T< 4.1.0.6-2771237 or later
DellPowerStore 9200T< 4.1.0.6-2771237 or later
DellPowerStore 500T< 4.3.1.2-2771239 or later
DellPowerStore 1000T< 4.3.1.2-2771239 or later
DellPowerStore 1200T< 4.3.1.2-2771239 or later
DellPowerStore 3000T< 4.3.1.2-2771239 or later
DellPowerStore 3200Q< 4.3.1.2-2771239 or later
DellPowerStore 3200T< 4.3.1.2-2771239 or later
DellPowerStore 5000T< 4.3.1.2-2771239 or later
DellPowerStore 5200Q< 4.3.1.2-2771239 or later
DellPowerStore 5200T< 4.3.1.2-2771239 or later
DellPowerStore 7000T< 4.3.1.2-2771239 or later
DellPowerStore 9000T< 4.3.1.2-2771239 or later
DellPowerStore 9200T< 4.3.1.2-2771239 or later

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2026-58574?
Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.
How severe is CVE-2026-58574?
CVE-2026-58574 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2026-58574?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-58574?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST