CVE-2026-70415: High severity vulnerability
Published Aug 18, 2026
·Updated
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service.
Event History
Aug 18, 2026
CVE Published
via MITRE·04:54 PM
Data Sourced
via MITRE·04:54 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are realistically exposed?
Systems are exposed if their NFS/RPC service is remotely reachable by an unauthenticated attacker. The issue affects Dell PowerStore SDNAS.
2
What does an attacker need to exploit this issue?
An attacker needs remote network access to the affected NFS/RPC service; authentication and user interaction are not required. Exploitation is rated high complexity.
3
What could happen if exploitation succeeds?
Successful exploitation could lead to command execution or denial of service, with high impact to confidentiality, integrity, and availability.