Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Dell PowerStore SDNAS SMB/CIFS Out-of-bounds Write

CVE-2026-67271 · published 1 month ago
Summary

An attacker can remotely crash or take control of your Dell PowerStore SDNAS system using a specially crafted message. This could cause downtime and potentially allow an attacker to execute malicious code. Dell recommends applying the latest updates to fix this vulnerability.

What to do
  • Update dell powerstore 500t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 1000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 1200t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 3000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 3200q to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 3200t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 5000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 5200q to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 5200t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 7000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 9000t to version 5.0.0.2-2761110 or later or later.
  • Update dell powerstore 9200t to version 5.0.0.2-2761110 or later or later.
Affected software
VendorProductAffected versions
dell powerstore 500t < 5.0.0.2-2761110 or later
dell powerstore 1000t < 5.0.0.2-2761110 or later
dell powerstore 1200t < 5.0.0.2-2761110 or later
dell powerstore 3000t < 5.0.0.2-2761110 or later
dell powerstore 3200q < 5.0.0.2-2761110 or later
dell powerstore 3200t < 5.0.0.2-2761110 or later
dell powerstore 5000t < 5.0.0.2-2761110 or later
dell powerstore 5200q < 5.0.0.2-2761110 or later
dell powerstore 5200t < 5.0.0.2-2761110 or later
dell powerstore 7000t < 5.0.0.2-2761110 or later
dell powerstore 9000t < 5.0.0.2-2761110 or later
dell powerstore 9200t < 5.0.0.2-2761110 or later
Original advisory text
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of s...
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for remote code execution.
References
Severity
9.8 Critical
CVSS 3.1: 9.8 (NVD)
Exploitation
EPSS <1%
Type
CWE-787Out-of-bounds Write
Timeline
Published18 Aug 2026
Updated25 Sep 2026
First seen18 Aug 2026
Sources
CVE-2026-67271 · NVD
CVE-2026-67271 · MITRE
Track software like this
Free during beta