CVE-2026-58575CWE-290

CVE-2026-58575

High · published September 1, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00528 · 43.9th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2026-09-01T17:19Z
Affected products (9)
ProductVersionsFixed in
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
dell/powerstoreosall versions—
References (1)
https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities · [email protected]
EPSS history
Timeline
  • 03 SEP 03:31Z
    EPSS moved — → 0%
    epss
  • 01 SEP 12:48Z
    Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability
    cvelistv5