Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Dell PowerStore allows unauthorized access to storage devices

CVE-2026-67262 · published 2 months ago
Summary

Dell PowerStore's security feature to control access to storage devices is not working correctly. This allows an attacker with access to a specific host to read or write data to areas of the storage they shouldn't have access to. To protect your data, make sure to review and update your access controls for all hosts connected to the storage device.

What to do
  • Update dell powerstore 3200q to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 3200t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 5000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 5200q to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 5200t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 7000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 9000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 9200t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 500t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 1000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 1200t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 3000t to version 5.0.0.2-2761110 or later or later.
Affected software
VendorProductAffected versions
dell powerstore 3200q < 5.0.0.2-2761110 or later
dell powerstore 3200t < 5.0.0.2-2761110 or later
dell powerstore 5000t < 5.0.0.2-2761110 or later
dell powerstore 5200q < 5.0.0.2-2761110 or later
dell powerstore 5200t < 5.0.0.2-2761110 or later
dell powerstore 7000t < 5.0.0.2-2761110 or later
dell powerstore 9000t < 5.0.0.2-2761110 or later
dell powerstore 9200t < 5.0.0.2-2761110 or later
dell powerstore 500t < 5.0.0.2-2761110 or later
dell powerstore 1000t < 5.0.0.2-2761110 or later
dell powerstore 1200t < 5.0.0.2-2761110 or later
dell powerstore 3000t < 5.0.0.2-2761110 or later
Original advisory text
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authoriz...
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published18 Aug 2026
Updated4 Nov 2026
First seen18 Aug 2026
Sources
CVE-2026-67262 · NVD
CVE-2026-67262 · MITRE
Track software like this
Free during beta