CVE-2026-116411: SSRF

Published Nov 13, 2026
·
Updated

Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.

Affected Software

1 affected component
Dell PowerStore

Event History

Nov 13, 2026
CVE Published
via MITRE·02:03 PM
Data Sourced
via MITRE·02:03 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Who can exploit this issue?

An authenticated user with limited privileges could potentially exploit it. The provided information does not indicate that unauthenticated attackers can use this vulnerability.

2

What level of access does exploitation require?

The attacker needs network access to the affected PowerStore environment and valid low-privilege authentication. No user interaction is required.

3

What could an attacker obtain through exploitation?

The vulnerability could allow requests to internal services, potentially resulting in information disclosure. The provided information does not identify which internal services or data may be accessible.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203