Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Dell PowerStore SDNAS allows remote file access

CVE-2026-79687 · published 2 months ago
Summary

The Dell PowerStore SDNAS software on the listed PowerStore models can be accessed without proper login checks. An attacker who can reach the system over the network could read or modify files stored on it. Apply the latest security update from Dell and restrict network access to trusted hosts.

What to do
  • Update dell powerstore 500t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 1000t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 1200t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 3000t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 3200q to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 3200t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 5000t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 5200q to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 5200t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 7000t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 9000t to version 4.3.1.2-2771239 or later or later.
  • Update dell powerstore 9200t to version 4.3.1.2-2771239 or later or later.
Affected software
VendorProductAffected versions
dell powerstore 500t < 4.3.1.2-2771239 or later
dell powerstore 1000t < 4.3.1.2-2771239 or later
dell powerstore 1200t < 4.3.1.2-2771239 or later
dell powerstore 3000t < 4.3.1.2-2771239 or later
dell powerstore 3200q < 4.3.1.2-2771239 or later
dell powerstore 3200t < 4.3.1.2-2771239 or later
dell powerstore 5000t < 4.3.1.2-2771239 or later
dell powerstore 5200q < 4.3.1.2-2771239 or later
dell powerstore 5200t < 4.3.1.2-2771239 or later
dell powerstore 7000t < 4.3.1.2-2771239 or later
dell powerstore 9000t < 4.3.1.2-2771239 or later
dell powerstore 9200t < 4.3.1.2-2771239 or later
dell powerstoreos 4.1.0.0
4.1.0.1
4.1.0.2
4.1.0.3
4.1.0.4
4.1.0.5
4.3.0.0
4.3.1.0
4.3.1.1
cpe:2.3:o:dell:powerstoreos:4.1.0.0:build_2435323:*:*:*:*:*:*
Original advisory text
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to ...
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published1 Sep 2026
Updated3 Nov 2026
First seen1 Sep 2026
Sources
CVE-2026-79687 · NVD
CVE-2026-79687 · MITRE
Track software like this
Free during beta