Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Dell PowerStore could let low-privilege user gain admin rights

CVE-2026-103813 · published today
Summary

A flaw in Dell PowerStore allows a user who can log in with limited rights to run system commands. This could let them elevate their access to full administrator control of the storage system. Apply the latest updates from Dell as soon as possible to close the gap.

What to do
  • Update dell powerstore 500t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 1000t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 1200t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 3000t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 3200q to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 3200t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 5000t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 5200q to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 5200t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 7000t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 9000t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 9200t to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 1500 to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 5500 to version 5.1.0.0-2798105 or later or later.
  • Update dell powerstore 9500 to version 5.1.0.0-2798105 or later or later.
Affected software
VendorProductAffected versions
dell powerstore 500t < 5.1.0.0-2798105 or later
dell powerstore 1000t < 5.1.0.0-2798105 or later
dell powerstore 1200t < 5.1.0.0-2798105 or later
dell powerstore 3000t < 5.1.0.0-2798105 or later
dell powerstore 3200q < 5.1.0.0-2798105 or later
dell powerstore 3200t < 5.1.0.0-2798105 or later
dell powerstore 5000t < 5.1.0.0-2798105 or later
dell powerstore 5200q < 5.1.0.0-2798105 or later
dell powerstore 5200t < 5.1.0.0-2798105 or later
dell powerstore 7000t < 5.1.0.0-2798105 or later
dell powerstore 9000t < 5.1.0.0-2798105 or later
dell powerstore 9200t < 5.1.0.0-2798105 or later
dell powerstore 1500 < 5.1.0.0-2798105 or later
dell powerstore 5500 < 5.1.0.0-2798105 or later
dell powerstore 9500 < 5.1.0.0-2798105 or later
Original advisory text
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalati...
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.1 Critical
Type
CWE-78OS Command Injection
Timeline
Published13 Nov 2026
Updated13 Nov 2026
First seen13 Nov 2026
Sources
CVE-2026-103813 · NVD
CVE-2026-103813 · MITRE
Track software like this
Free during beta