CVE-2026-58574 — CRITICAL (9.8)

Vulnerability Description

Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Related Weaknesses (CWE)

CWE-306

References

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-

FAQ

What is CVE-2026-58574?

CVE-2026-58574 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit ...

How severe is CVE-2026-58574?

CVE-2026-58574 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-58574?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.