Multiple security vulnerabilities have been identified in Dell PowerStore storage systems, affecting PowerStore T OS 5.1.x versions prior to 5.1.0.0-2798105. According to Dell Security Advisory DSA-2026-479, the disclosure covers 44 vulnerabilities, including critical flaws in the Software-Defined NAS (SDNAS) services, command execution mechanisms, authentication controls, and privilege management. These vulnerabilities could allow unauthenticated remote attackers to cause service disruption or execute arbitrary code, while authenticated and local attackers may escalate privileges, access sensitive information, or compromise storage infrastructure. The highest reported severity is CVSS 9.8, and Dell has not reported confirmed exploitation at the time of the advisory.
Dell US+2
CVE-2026-116443 (CVSS 9.8 – Critical): A stack-based buffer overflow in the SDNAS TFTP service allows an unauthenticated remote attacker to cause denial of service or potentially execute arbitrary code on the NAS node.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in Dell PowerStore storage systems, affecting PowerStore T OS 5.1.x versions prior to 5.1.0.0-2798105. According to Dell Security Advisory DSA-2026-479, the disclosure covers 44 vulnerabilities, including critical flaws in the Software-Defined NAS (SDNAS) services, command execution mechanisms, authentication controls, and privilege management. These vulnerabilities could allow unauthenticated remote attackers to cause service disruption or execute arbitrary code, while authenticated and local attackers may escalate privileges, access sensitive information, or compromise storage infrastructure. The highest reported severity is CVSS 9.8, and Dell has not reported confirmed exploitation at the time of the advisory.
Dell US+2
CVE-2026-116443 (CVSS 9.8 – Critical): A stack-based buffer overflow in the SDNAS TFTP service allows an unauthenticated remote attacker to cause denial of service or potentially execute arbitrary code on the NAS node.[emaillocker id="1283"]
CVE-2026-116440 (CVSS 9.8 – Critical): A buffer overflow vulnerability in Dell PowerStore SDNAS could allow unauthenticated remote attackers to cause denial of service or potentially execute arbitrary code on the NAS node.
CVE-2026-116448 (CVSS 9.8 – Critical): An OS command-injection vulnerability in SDNAS allows an attacker with internal network access to execute arbitrary commands with root privileges on the NAS node.
CVE-2026-116449 (CVSS 9.8 – Critical): Another OS command-injection vulnerability in SDNAS allows attackers with internal network access to execute arbitrary commands as root, potentially resulting in complete NAS node compromise.
CVE-2026-116439 (CVSS 9.8 – Critical): A path traversal vulnerability in SDNAS allows unauthenticated attackers to read, modify, or delete arbitrary files on the NAS node.
CVE-2026-116446 (CVSS 9.8 – Critical): An out-of-bounds memory vulnerability in the NAS NFS service can be exploited by an unauthenticated remote attacker to cause denial of service.
CVE-2026-67271 (CVSS 9.8 – Critical): An out-of-bounds read vulnerability in the NAS file service allows unauthenticated remote attackers to trigger denial of service.
CVE-2026-116441 (CVSS 9.6 – Critical): An out-of-bounds write vulnerability in the storage-processor interconnect driver could allow a malicious peer to execute code with system-level privileges.
CVE-2026-111508 (CVSS 9.1 – Critical): An OS command-injection vulnerability in Dell PowerStore could allow an attacker to execute arbitrary commands with root privileges on the appliance.
CVE-2026-103813 (CVSS 9.1 – Critical): An OS command-injection vulnerability allows an authenticated user with limited privileges to potentially escalate privileges and execute commands as root.
CVE-2026-111509 (CVSS 9.1 – Critical): A cryptographically weak pseudorandom number generator in SDNAS could allow network attackers to decrypt or tamper with NAS SSH/SFTP sessions.
CVE-2026-116411 (CVSS 8.8 – High): A server-side request forgery vulnerability allows an authenticated low-privileged attacker to send requests to internal services, potentially exposing sensitive information.
CVE-2026-111545 (CVSS 8.8 – High): An SQL injection vulnerability could allow an authenticated attacker to disclose stored private keys and modify trusted certificates.
CVE-2026-107515 (CVSS 8.8 – High): An improper privilege-management vulnerability allows an authenticated attacker to potentially escalate privileges to administrator level.
CVE-2026-86356 (CVSS 8.8 – High): An authorization-bypass vulnerability could allow an authenticated attacker to gain administrator privileges.
CVE-2026-107524 (CVSS 8.8 – High): An integer overflow vulnerability could allow an authenticated storage host to trigger out-of-bounds data access or denial of service.
CVE-2026-82156 (CVSS 8.8 – High): An authorization-bypass vulnerability allows a low-privileged attacker to potentially escalate privileges to administrator level.
CVE-2026-111506 (CVSS 8.8 – High): A missing-authentication vulnerability could allow a network-adjacent attacker to bypass authentication and authorization, resulting in information disclosure or denial of service.
CVE-2026-116447 (CVSS 8.8 – High): A local privilege-escalation vulnerability in SDNAS allows a low-privileged attacker to potentially execute code as root on the NAS node.
CVE-2026-107518 (CVSS 8.7 – High): An SSRF vulnerability allows an authenticated attacker with limited privileges to make the appliance connect to attacker-controlled internal systems.
CVE-2026-107523 (CVSS 8.7 – High): An integer overflow vulnerability could allow an adjacent attacker to bypass volume boundary checks, potentially resulting in data destruction or denial of service.
CVE-2026-86355 (CVSS 8.3 – High): An external control of file name or path vulnerability could allow an authenticated remote attacker to escalate privileges on the appliance.
CVE-2026-111507 (CVSS 8.1 – High): An authorization-bypass vulnerability could allow a remote attacker to act under another user's session, potentially resulting in denial of service or unauthorized access.
CVE-2026-111547 (CVSS 8.1 – High): An out-of-bounds read vulnerability could allow attackers to cause denial of service or disclose limited information.
CVE-2026-107519 (CVSS 8.1 – High): An integer underflow vulnerability could allow an attacker to disrupt a cryptographic service through denial of service.
CVE-2026-116442 (CVSS 8.1 – High): An authentication-bypass-by-replay vulnerability in the NAS NDMP service could allow a network attacker to gain unauthorized backup and restore control of the appliance.
CVE-2026-82171 (CVSS 8.0 – High): An XML External Entity (XXE) injection vulnerability could allow a high-privileged attacker to disclose sensitive files and potentially compromise the appliance with root-level access.
CVE-2026-107516 (CVSS 7.2 – High): An OS command-injection vulnerability could allow an authenticated user with limited privileges to execute arbitrary commands with root privileges.
CVE-2026-107522 (CVSS 7.2 – High): An improper authorization vulnerability could allow an authenticated attacker to escalate privileges to administrator level.
CVE-2026-82177 (CVSS 7.2 – High): An OS command-injection vulnerability could allow a high-privileged attacker to execute arbitrary commands with root privileges on the appliance.
CVE-2026-116413 (CVSS 7.1 – High): A broken cryptographic implementation could allow a low-privileged attacker to impersonate another identity and gain unauthorized access.
CVE-2026-116412 (CVSS 5.5 – Medium): An insecure file-permissions vulnerability could allow a local low-privileged attacker to disclose administrative credentials.
CVE-2026-107517 (CVSS 5.4 – Medium): A stored cross-site scripting vulnerability could allow an authenticated low-privileged attacker to execute malicious scripts in a higher-privileged user's session.
CVE-2026-107520 (CVSS 5.4 – Medium): Another stored cross-site scripting vulnerability could allow malicious scripts to execute in a higher-privileged user's session.
CVE-2026-107525 (CVSS 5.3 – Medium): An information-disclosure vulnerability could allow unauthenticated attackers to obtain service metadata useful for further attacks.
CVE-2026-86353 (CVSS 5.0 – Medium): The use of a weak cryptographic algorithm could allow an attacker with existing privileged access to recover stored credentials.
CVE-2026-82179 (CVSS 4.9 – Medium): An authorization-bypass vulnerability could allow an authenticated administrator to bypass multi-approver controls for critical operations.
CVE-2026-107511 (CVSS 4.8 – Medium): A CSV injection vulnerability could allow a high-privileged attacker to execute code on another user's workstation when a malicious CSV file is opened.
CVE-2026-107526 (CVSS 4.6 – Medium): Improper input validation could allow an authenticated low-privileged attacker to introduce stored cross-site scripting into the management interface.
CVE-2026-82174 (CVSS 4.3 – Medium): A content-injection vulnerability could allow an unauthenticated attacker to display misleading content on the legitimate login page, potentially supporting phishing attacks.
CVE-2026-82175 (CVSS 3.8 – Low): An SSRF vulnerability could allow a high-privileged attacker to access internal network services through the appliance.
The vulnerabilities affect multiple Dell PowerStore models running PowerStore T OS 5.1.x, including PowerStore 500T, 1000T, 1200T, 1500, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 5500, 7000T, 9000T, 9200T, and 9500.
The following reports contain further technical details:
[/emaillocker]