CVE-2026-67271: Critical severity Dell PowerStore SDNAS vulnerability
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Systems exposing SMB/CIFS to remote, unauthenticated users are the relevant attack surface. No authentication, user interaction, or prior privileges are required according to the supplied severity vector.
What does an attacker need to do to exploit this issue?
An attacker needs remote access to the affected SMB/CIFS service and must send a specially crafted SMB packet. The stated outcomes include denial of service, potentially persistent when automatic restarts are enabled, and remote code execution by a more sophisticated attacker.