CVE-2026-111545: SQL Injection

Published Nov 13, 2026

Updated

Dell PowerStore contains a SQL Injection vulnerability. An authenticated attacker could exploit this vulnerability, potentially leading to disclosure of stored private keys and tampering with trusted certificates.

Affected Software

1 affected component

Dell PowerStore

Event History

Nov 13, 2026

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated to Dell PowerStore. The provided data does not identify any additional privileges, user interaction, or network restrictions beyond the network attack vector.

What is the likely impact if exploitation succeeds?

Successful exploitation could disclose stored private keys and allow tampering with trusted certificates. The supplied severity vector also indicates high potential impact to confidentiality, integrity, and availability.

Is a default PowerStore deployment affected?

The provided information does not state whether the vulnerability depends on a non-default configuration or whether default deployments are affected.

CVE-2026-111545: SQL Injection

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploitation succeeds?

Is a default PowerStore deployment affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely impact if exploitation succeeds?

Is a default PowerStore deployment affected?