Read the docs
TI-2026-42160 Aliases CVE-2026-58574GHSA-6fp6-3cg6-j52w

Missing authentication in Dell PowerStore 500T

Priority MEDIUM 50CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00625 50th percentileScored 2026-11-07
Fix Fixed PowerStore 500T (Dell): 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or laterPowerStore 1000T (Dell): 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later+10 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellPowerStore 500Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 1000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 1200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 3000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 3200Qbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 3200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 5000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 5200Qbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 5200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 7000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 9000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 9200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 500Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 1000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 1200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 3000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 3200Qbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 3200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 5000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 5200Qbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 5200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 7000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 9000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 9200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
  • PowerStore 500T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 1000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 1200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 3000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 3200Q VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 3200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 5000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 5200Q VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 5200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 7000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 9000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 9200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 500T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 1000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 1200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 3000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 3200Q VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 3200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 5000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 5200Q VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 5200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 7000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 9000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 9200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:o:dell:powerstoreos:4.1.0.0:build_2435323:*:*:*:*:*:*4.1.0.0 build_2435323VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.1:build_2529516:*:*:*:*:*:*4.1.0.1 build_2529516VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.2:build_2567482:*:*:*:*:*:*4.1.0.2 build_2567482VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.3:build_2596462:*:*:*:*:*:*4.1.0.3 build_2596462VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.4:build_2633110:*:*:*:*:*:*4.1.0.4 build_2633110VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.5:build_2691357:*:*:*:*:*:*4.1.0.5 build_2691357VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.3.0.0:build_2611831:*:*:*:*:*:*4.3.0.0 build_2611831VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.3.1.0:build_2662695:*:*:*:*:*:*4.3.1.0 build_2662695VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.3.1.1:build_2726662:*:*:*:*:*:*4.3.1.1 build_2726662VulnerableDell
cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.0:build_2435323:*:*:*:*:*:* Versions 4.1.0.0 build_2435323 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.1:build_2529516:*:*:*:*:*:* Versions 4.1.0.1 build_2529516 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.2:build_2567482:*:*:*:*:*:* Versions 4.1.0.2 build_2567482 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.3:build_2596462:*:*:*:*:*:* Versions 4.1.0.3 build_2596462 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.4:build_2633110:*:*:*:*:*:* Versions 4.1.0.4 build_2633110 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.5:build_2691357:*:*:*:*:*:* Versions 4.1.0.5 build_2691357 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.3.0.0:build_2611831:*:*:*:*:*:* Versions 4.3.0.0 build_2611831 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.3.1.0:build_2662695:*:*:*:*:*:* Versions 4.3.1.0 build_2662695 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.3.1.1:build_2726662:*:*:*:*:*:* Versions 4.3.1.1 build_2726662 Vulnerable ·Dell
  • cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_5200q:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
  • cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_5200q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell

Remediation

  • Fix · CNA PowerStore 500T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 1000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 1200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 3000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 3200Q (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 3200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 5000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 5200Q (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 5200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 7000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 9000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 9200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 500T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 1000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 1200T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 3000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 3200Q (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 3200T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 5000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 5200Q (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 5200T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 7000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 9000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 9200T (Dell) Fixed in 4.3.1.2-2771239 or later

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-58574
  2. 2026-10-03 Alias added: GHSA-6fp6-3cg6-j52w
  3. 2026-10-31 EPSS moved to the 50th–90th percentile
  4. 2026-11-02 EPSS moved to the below the 50th percentile
  5. 2026-11-03 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2022-10113 Information disclosure in Dell PowerStore CVSS 3.1CRITICAL 9.8
  • TI-2026-55184 Missing authentication in Dell PowerStore 500T CVSS 3.1CRITICAL 10.0
  • TI-2022-10114 Authentication bypass in Dell PowerStore CVSS 3.1CRITICAL 9.8
  • TI-2026-55183 Protection mechanism failure in Dell PowerStore 500T CVSS 3.1HIGH 8.8
  • TI-2026-55181 Protection mechanism failure in Dell PowerStore 500T CVSS 3.1HIGH 8.8
  • TI-2026-55180 Protection mechanism failure in Dell PowerStore 500T CVSS 3.1HIGH 8.8
See all 23 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences