Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance.

Project Subscriptions

Vendors Products
Powerstore 1000t Subscribe
Powerstore 1200t Subscribe
Powerstore 3000t Subscribe
Powerstore 3200q Subscribe
Powerstore 3200t Subscribe
Powerstore 5000t Subscribe
Powerstore 500t Subscribe
Powerstore 5200q Subscribe
Powerstore 5200t Subscribe
Powerstore 7000t Subscribe
Powerstore 9000t Subscribe
Powerstore 9200t Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Sat, 14 Nov 2026 20:45:00 +0000

Type Values Removed Values Added
Title External Control of File Name or Path Leading to Privilege Escalation in Dell PowerStore

Sat, 14 Nov 2026 11:45:00 +0000

Type Values Removed Values Added
Title External Control of File Name or Path Leading to Privilege Escalation in Dell PowerStore

Fri, 13 Nov 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Vendors & Products Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t

Fri, 13 Nov 2026 12:45:00 +0000

Type Values Removed Values Added
Description Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance.
Weaknesses CWE-73
References
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-11-14T04:58:15.682Z

Reserved: 2026-09-07T10:04:28.180Z

Link: CVE-2026-86355

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-11-13T13:18:29.887

Modified: 2026-11-14T05:18:41.310

Link: CVE-2026-86355

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-14T20:30:08Z

Weaknesses