CVE-2026-76111

Low-Privilege Escalation via Incorrect Authorization in Dell PowerStore

Published Sep 1, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Dell powerstoreos
CPEs cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5200q:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.1.0.0:build_2435323:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.1.0.1:build_2529516:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.1.0.2:build_2567482:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.1.0.3:build_2596462:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.1.0.4:build_2633110:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.1.0.5:build_2691357:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.3.0.0:build_2611831:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.3.1.0:build_2662695:*:*:*:*:*:*
cpe:2.3:o:dell:powerstoreos:4.3.1.1:build_2726662:*:*:*:*:*:*
Vendors & Products Dell powerstoreos
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Low-Privilege Escalation via Incorrect Authorization in Dell PowerStore
Type Values Removed Values Added
First Time appeared Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Vendors & Products Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Type Values Removed Values Added
Description Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}