Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV
TI-2026-18287 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Priority CRITICAL 100KEV 2026-02-18TI-2021-04636 Dell dbutil Driver Insufficient Access Control Vulnerability Priority CRITICAL 97KEV 2022-03-31TI-2020-09565 Treck TCP/IP stack Out-of-Bounds Read Vulnerability Priority HIGH 82KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records
Secure Connect Gateway 127 records MEDIUM Data Domain Operating System 100 records MEDIUM Powerscale Onefs 98 records MEDIUM Emc Powerscale Onefs 84 records MEDIUM Wyse Management Suite 70 records MEDIUM Latitude 9410 Firmware 65 records LOW Latitude 5411 Firmware 64 records LOW Latitude 5511 Firmware 64 records LOW

Records

24 records in Powerstoreos · all components

TI-2026-42160 CVE-2026-58574 · GHSA-6fp6-3cg6-j52w

Missing authentication in Dell PowerStore 500T

Priority MEDIUM 50

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00625 Published 2026-08-31 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-306
TI-2022-10113 CVE-2022-26869 · GHSA-w358-vxfm-484c

Information disclosure in Dell PowerStore

Priority MEDIUM 46

Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02064 Published 2022-06-02 Fixed in 2.0.0.x, 2.0.1.x +1 CWE-200
TI-2026-55184 CVE-2026-79687 · GHSA-x28c-7fgp-69gv

Missing authentication in Dell PowerStore 500T

Priority MEDIUM 43

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00286 Published 2026-09-01 Fixed in 4.3.1.2-2771239 or later CWE-306
TI-2022-10114 CVE-2022-26870 · GHSA-r96m-mpm2-p9xp

Authentication bypass in Dell PowerStore

Priority MEDIUM 43

Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0077 Published 2022-10-21 Fixed in 2.1.x CWE-288
TI-2026-55183 CVE-2026-79686 · GHSA-2f76-39wr-xp7w

Protection mechanism failure in Dell PowerStore 500T

Priority MEDIUM 41

Dell PowerStore contains a Protection Mechanism Failure vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00494 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-693
TI-2026-55181 CVE-2026-79684 · GHSA-q9qp-pp6x-v5rw

Protection mechanism failure in Dell PowerStore 500T

Priority MEDIUM 41

Dell PowerStore contains a Protection Mechanism Failure vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00494 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-693
TI-2026-55180 CVE-2026-79683 · GHSA-r699-gp3q-8j4v

Protection mechanism failure in Dell PowerStore 500T

Priority MEDIUM 41

Dell PowerStore contains a Protection Mechanism Failure vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0049 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.1.0.6-2771237 or late +1 CWE-693
TI-2026-55179 CVE-2026-79682 · GHSA-2r72-j89f-5c3v

Command injection in Dell PowerStore 500T

Priority MEDIUM 41

Dell PowerStore contains a Command Injection vulnerability.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00748 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-77
TI-2026-42161 CVE-2026-58575 · GHSA-4522-54pv-7j84

Authentication bypass by spoofing in Dell PowerStore 500T

Priority MEDIUM 41

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00528 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-290
TI-2026-42158 CVE-2026-58571 · GHSA-mxfv-63r7-pcpx

OS command injection in Dell PowerStore 500T

Priority MEDIUM 41

Dell PowerStore contains an OS Command Injection vulnerability.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00748 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-78
TI-2026-42156 CVE-2026-58567 · GHSA-mfh5-75mm-ph6w

OS command injection in Dell PowerStore 500T

Priority MEDIUM 41

Dell PowerStore contains an OS Command Injection vulnerability.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00748 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-78
TI-2026-53259 CVE-2026-76111 · GHSA-6rfj-pjgc-mv6h

Incorrect authorization in Dell PowerStore 500T

Priority MEDIUM 40

Dell PowerStore contains an Incorrect Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-863
TI-2026-42159 CVE-2026-58572 · GHSA-5vv4-6523-2qxh

Code injection in Dell PowerStore 500T

Priority MEDIUM 40

Dell PowerStore contains a Code Injection vulnerability.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00256 Published 2026-09-01 Fixed in 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later CWE-94
TI-2023-15760 CVE-2023-32478 · GHSA-xr7g-r5xg-pq95

Sensitive information in log files in Dell PowerStore

Priority MEDIUM 40

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability.

CVSS 3.1CRITICAL 9.0 Network High privileges No interaction EPSS 0.00539 Published 2023-07-21 Fixed in 3.5.0.1-2083289 CWE-532
TI-2022-10111 CVE-2022-26867 · GHSA-w9qh-pvx2-rhmh

CSV injection in Dell PowerStore

Priority LOW 36

PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00608 Published 2022-06-02 Fixed in PowerStore SW v2.1.1.0 CWE-1236
TI-2022-06830 CVE-2022-22556 · GHSA-4mfw-x7wq-v7gw

Uncontrolled resource consumption in Dell PowerStore

Priority LOW 36

Dell PowerStore contains an Uncontrolled Resource Consumption Vulnerability in PowerStore User Interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01313 Published 2022-06-02 Fixed in PowerStore SW v2.1.0.0 CWE-400
TI-2022-10112 CVE-2022-26868 · GHSA-x9m9-3xvj-c28p

OS command injection in Dell PowerStore

Priority LOW 34

Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00403 Published 2022-06-02 Fixed in PowerStore SW v2.1.1.0 CWE-78
TI-2022-06831 CVE-2022-22557 · GHSA-xfxv-hqvj-fpfc

Insufficiently protected credentials in Dell PowerStore

Priority LOW 33

PowerStore contains Plain-Text Password Storage Vulnerability in PowerStore X & T environments running versions 2.0.0.x and 2.0.1.x A locally authenticated attacker could potentially exploit this vulnerability, leading t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00205 Published 2022-06-02 Fixed in PowerStore SW v2.1.0.0-1553419 CWE-256
TI-2026-22577 CVE-2026-28265 · GHSA-669m-x2jm-gm59

Path traversal in Dell PowerStore

Priority LOW 30

PowerStore, contains a Path Traversal vulnerability in the Service user.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00121 Published 2026-04-01 Fixed in 4.4.0.0-2692403 or later CWE-35
TI-2025-24885 CVE-2025-36572 · GHSA-xh67-8c9c-jwgx

Hard-coded credentials in Dell PowerStore

Priority LOW 29

Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00328 Published 2025-05-28 Fixed in 4.0.1.3-2494147 CWE-798
TI-2022-10110 CVE-2022-26866 · GHSA-7h6f-6j9m-8x6g

Cross-site scripting in Dell PowerStore

Priority LOW 25

Dell PowerStore Versions before v2.1.1.0.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00478 Published 2022-06-02 Fixed in PowerStore SW v2.1.1.0 CWE-79
Open these records in search →