CVE-2026-76111
HIGH
8.8
CVSS Score
Published: September 1, 2026 at 11:37 AM UTC
Updated: September 30, 2026 at 08:24 PM UTC
13 products affected across 1 vendorPowerstoreosPowerStore 500TPowerStore 9000T
Using PowerStore 500T by Dell?
Get instant alerts when new vulnerabilities affect PowerStore 500T - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 0.4%
SSVC
No known exploit
Description
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
4.1.0.0 build_24353234.1.0.1 build_25295164.1.0.2 build_25674824.1.0.3 build_25964624.1.0.4 build_26331104.1.0.5 build_26913574.3.0.0 build_26118314.3.1.0 build_26626954.3.1.1 build_2726662
dell-powerstore-1000t (same device) · dell-powerstore-1200t (same device) · dell-powerstore-3000t (same device) · dell-powerstore-3200q (same device) · dell-powerstore-3200t (same device) · dell-powerstore-5000t (same device) · dell-powerstore-500t (same device) · dell-powerstore-5200q (same device) · dell-powerstore-5200t (same device) · dell-powerstore-7000t (same device) · dell-powerstore-9000t (same device) · dell-powerstore-9200t (same device)
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
v < 4.1.0.6-2771237 or laterv < 4.3.1.2-2771239 or later
Affected range stops below 4.1.0.6-2771237 or later, so it looks safe — our inference, not a vendor statement
Affected range stops below 4.3.1.2-2771239 or later, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (1)
Vendor Advisory
Source: cverecord
https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilitiesSSVC — Action Prioritization
SSVCNo known exploitNot automatableTotal impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
8.8HIGHdell
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- LOW
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- HIGH
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-863
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card