CVE-2026-86355: High severity Dell PowerStore vulnerability
Published Nov 13, 2026
·Updated
Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance.
Affected Software
1 affected component
Dell PowerStore
Event History
Nov 13, 2026
CVE Published
via MITRE·12:31 PM
Data Sourced
via MITRE·12:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be remotely authenticated. No user interaction is required, and the attack can be performed over the network.
2
What is the likely impact if exploitation succeeds?
Successful exploitation could lead to privilege escalation on the PowerStore appliance. The supplied severity vector indicates high confidentiality and integrity impact, with low availability impact.