CVE-2026-107526: Input Validation
Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface.
Event History
Frequently Asked Questions
What access and interaction are required to exploit this issue?
An attacker must be authenticated with low-privileged access and must be able to submit crafted input. Exploitation also requires user interaction with the stored cross-site scripting content in the management interface.
Who is most likely to be exposed?
Organizations where low-privileged users can access Dell PowerStore and enter data that is later displayed in the management interface are exposed. Higher-privileged management-interface users may be affected if they view the attacker-controlled stored content.
What could exploitation allow?
Successful exploitation could result in stored cross-site scripting in the management interface. The reported impact includes limited confidentiality and integrity effects, with no reported availability impact.