CVE-2026-28265: Path Traversal
Published Apr 1, 2026
·Updated
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
Affected Software
14 affected components
Dell EMC PowerStore
All of the following
Dell Powerstoreos>=4.3.0.0<4.3.1.1
Any of the following
Dell Powerstore 1000t
Dell Powerstore 1200t
Dell Powerstore 3000t
Dell Powerstore 3200q
Dell Powerstore 3200t
Dell Powerstore 5000t
Dell Powerstore 500t
Dell Powerstore 5200q
Dell Powerstore 5200t
Dell Powerstore 7000t
Dell Powerstore 9000t
Dell Powerstore 9200t
Event History
Apr 1, 2026
CVE Published
via MITRE·07:41 AM
Data Sourced
via MITRE·07:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-28265?
CVE-2026-28265 has a low severity rating due to it requiring local access for exploitation.
2
How do I fix CVE-2026-28265?
To address CVE-2026-28265, ensure you apply the latest security updates provided by Dell EMC for PowerStore.
3
Who is affected by CVE-2026-28265?
CVE-2026-28265 affects users of Dell EMC PowerStore who have the Service user enabled.
4
What are the risks associated with CVE-2026-28265?
The risks associated with CVE-2026-28265 include unauthorized modification of arbitrary system files by low privileged attackers.
5
Is there a workaround for CVE-2026-28265?
Currently, no specific workaround is recommended for CVE-2026-28265; updating the software is the best course of action.