CVE-2026-107525: Infoleak
Published Nov 13, 2026
·Updated
Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks.
Affected Software
1 affected component
Dell PowerStore
Event History
Nov 13, 2026
CVE Published
via MITRE·01:08 PM
Data Sourced
via MITRE·01:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The vulnerability can be exploited remotely by an unauthenticated attacker. No user interaction or prior privileges are required.
2
What information could be exposed?
An attacker could obtain service metadata that may be useful in planning or enabling further attacks. The available information does not indicate exposure of data beyond that metadata.
3
How severe is the impact?
This issue is rated medium with a CVSS score of 5.3. Its stated impact is limited to confidentiality, with no indicated integrity or availability impact.