CVE-2026-28265
Full vulnerability record from the local CVENow database.
Description
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
Severity
HIGH
CVSS score
7.1
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-04-01 08:16:05.490000
Last modified
2026-10-26 21:10:00.170000
View original CVE JSON
{
"id": "CVE-2026-28265",
"sourceIdentifier": "[email protected]",
"published": "2026-04-01T08:16:05.490",
"lastModified": "2026-10-26T21:10:00.170",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files."
},
{
"lang": "es",
"value": "PowerStore, contiene una vulnerabilidad de salto de ruta en el usuario de Servicio. Un atacante con privilegios bajos y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la modificación de archivos de sistema arbitrarios."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Dell",
"product": "PowerStore",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 500T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 1000T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 1200T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 3000T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 3200Q",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 3200T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 5000T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 5200Q",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 5200T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 7000T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 9000T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Dell",
"product": "PowerStore 9200T",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"lessThan": "4.4.0.0-2692403 or later",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.8,
"impactScore": 2.5
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-04-01T13:10:06.196625Z",
"id": "CVE-2026-28265",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-35"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dell:powerstoreos:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.3.0.0",
"versionEndExcluding": "4.3.1.1",
"matchCriteriaId": "347772B4-3FD7-4BEE-91D1-AF178CFC508E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FD5BE2B0-BB56-4E6C-8818-26910B23CE31"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AB965674-7EBA-437E-A13B-39BC3F3FE139"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "861B5BE7-159A-41FF-9658-D243051CAC88"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8456D5B0-3D6A-4020-B693-D949EE2BA12E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E0A29ED1-5CE6-4D49-A079-7F4E6D782DE1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2D5EE934-AD08-4C2B-B3EA-878975EE825E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6B529671-71A1-428C-BC17-C8E002222FEA"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_5200q:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B7CD86DB-77F8-45C8-848C-DD9DE9DA966D"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F0FCFFD4-A989-4AF3-99DF-32AE2547D9C1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "37E8CD6E-65F4-48A0-B796-93E4EE51BD06"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D9BB1B88-C9C0-4B08-84C6-279C79E34CD3"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F90EFCBC-F720-4426-8043-EB1489820C22"
}
]
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-us/000444169/dsa-2026-157-dell-powerstore-t-security-update-for-multiple-vulnerabilities",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}