CVE-2026-86353: Weak Encryption
Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with existing privileged access to the appliance to recover stored credentials.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Exposure is limited to Dell PowerStore appliances where an attacker already has privileged access. The vulnerability could allow that attacker to recover stored credentials.
What level of access does an attacker need?
An attacker needs existing privileged access to the appliance. The provided information does not indicate that unauthenticated or low-privileged users can exploit the issue.
What is the potential impact if exploited?
An attacker could recover stored credentials. The severity information indicates high confidentiality impact and low integrity impact, with no availability impact.
Does exploitation require user interaction or local access?
No user interaction is required, and the attack vector is network-based. Exploitation is rated as high complexity.