CVE-2026-79687: Critical severity Dell PowerStore vulnerability

Published Sep 1, 2026

Updated

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access.

Affected Software

22 affected components

Dell PowerStore

All of the following

Any of the following

Dell Powerstoreos=4.1.0.0-build_2435323

Dell Powerstoreos=4.1.0.1-build_2529516

Dell Powerstoreos=4.1.0.2-build_2567482

Dell Powerstoreos=4.1.0.3-build_2596462

Dell Powerstoreos=4.1.0.4-build_2633110

Dell Powerstoreos=4.1.0.5-build_2691357

Dell Powerstoreos=4.3.0.0-build_2611831

Dell Powerstoreos=4.3.1.0-build_2662695

Dell Powerstoreos=4.3.1.1-build_2726662

Any of the following

Dell Powerstore 1000t

Dell Powerstore 1200t

Dell Powerstore 3000t

Dell Powerstore 3200q

Dell Powerstore 3200t

Dell Powerstore 5000t

Dell Powerstore 500t

Dell Powerstore 5200q

Dell Powerstore 5200t

Dell Powerstore 7000t

Dell Powerstore 9000t

Dell Powerstore 9200t

Event History

Sep 1, 2026

CVE Published

via MITRE·03:58 PM

Data Sourced

via MITRE·03:58 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this vulnerability?

Dell PowerStore SDNAS deployments are exposed if an unauthenticated attacker can remotely reach the affected service or interface. No authentication or user interaction is required for exploitation.

What level of access could an attacker obtain?

Successful exploitation could lead to filesystem access. The provided information does not specify which filesystems, permissions, or operations would be accessible.

Is exploitation straightforward?

The attack can be initiated remotely without credentials, but the vulnerability is rated as having high attack complexity. The provided information does not identify the conditions required to successfully exploit it.