CVE-2026-82174: Medium severity Dell PowerStore vulnerability
Dell PowerStore contains a content-injection vulnerability. An unauthenticated attacker could exploit this vulnerability to display misleading text on the genuine login page for phishing.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Dell PowerStore login pages that are reachable by an attacker are exposed. Exploitation does not require authentication, but it does require a user to interact with the misleading content displayed on the genuine login page.
What can an attacker do with this vulnerability?
An attacker can inject misleading text into the legitimate PowerStore login page for phishing. The provided impact information indicates integrity impact only; no confidentiality or availability impact is listed.
How can I determine whether exploitation may have occurred?
The provided information does not include indicators of compromise, logging guidance, or detection methods. Review the Dell security update reference for vendor-provided remediation and investigation guidance.