CVE-2026-58574CWE-306

CVE-2026-58574

Critical · published August 31, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00625 · 49.3th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-08-31T11:17Z
Affected products (9)
ProductVersionsFixed in
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
References (1)
https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities · [email protected]
EPSS history
Timeline
  • 01 SEP 03:31Z
    EPSS moved — → 0%
    epss
  • 31 AUG 06:28Z
    Dell PowerStore contains a Missing Authentication for Critical Function vulnerability
    cvelistv5