CVE-2026-58569 json
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.
published 2026-09-01 2 mo ago modified 2026-10-02 37 d ago also EUVD-2026-69230
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 7%
- public exploits
- 0
- none known
Summary
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges..
Patch / fix
- Dell PowerStore 500T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 1000T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 1200T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 3000T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 3200Q 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 3200T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 5000T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 5200Q 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 5200T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 7000T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 9000T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
- Dell PowerStore 9200T 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 2 mo ago
Exploit prediction
0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Affected products
- Dell PowerStore 500T
- Dell PowerStore 1000T
- Dell PowerStore 1200T
- Dell PowerStore 3000T
- Dell PowerStore 3200Q
- Dell PowerStore 3200T
- Dell PowerStore 5000T
- Dell PowerStore 5200Q
- Dell PowerStore 5200T
- Dell PowerStore 7000T
- Dell PowerStore 9000T
- Dell PowerStore 9200T
Classification
- Weakness
-
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere
References
Sources
- CVE List CVE-2026-58569
- NVD CVE-2026-58569
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.