CVE-2026-67262: High severity Dell PowerStore vulnerability
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.
Affected Software
Event History
Frequently Asked Questions
Who is realistically able to exploit this issue?
Systems are exposed where an attacker can access a host that is mapped to the PowerStore appliance. The issue affects access control between that mapped host and LUNs it is not authorized to use.
What access and conditions does an attacker need?
An attacker needs access to a mapped host; no privileges or user interaction are required according to the provided vector. Exploitation has high attack complexity.
How can I tell whether the vulnerability is being exploited or affects my environment?
Review whether mapped hosts can read from or write to LUNs outside their assigned initiator-based access controls. Unauthorized LUN access from a mapped host is an indicator of exposure.