CVE-2026-28265 (GCVE-0-2026-28265)

Vulnerability from cvelistv5 – Published: 2026-04-01 07:41 – Updated: 2026-04-01 13:10
VLAI
Summary
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-04-01 13:10 UTC
CWE
Impacted products
Vendor Product Version CPE status
Dell PowerStore Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 500T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 1000T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 1200T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 3000T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 3200Q Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 3200T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 5000T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 5200Q Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 5200T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 7000T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 9000T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Dell PowerStore 9200T Affected: 0 , < 4.4.0.0-2692403 or later (semver)
guessed Create a notification for this product.
Date Public
2026-03-25 06:30
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28265",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-01T13:10:06.196625Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-01T13:10:14.638Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 500T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 1000T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 1200T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 3000T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 3200Q",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 3200T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 5000T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 5200Q",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 5200T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 7000T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 9000T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PowerStore 9200T",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "4.4.0.0-2692403 or later",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2026-03-25T06:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files."
            }
          ],
          "value": "PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-35",
              "description": "CWE-35: Path Traversal",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-01T07:41:28.180Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "url": "https://www.dell.com/support/kbdoc/en-us/000444169/dsa-2026-157-dell-powerstore-t-security-update-for-multiple-vulnerabilities"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2026-28265",
    "datePublished": "2026-04-01T07:41:28.180Z",
    "dateReserved": "2026-02-25T18:04:25.462Z",
    "dateUpdated": "2026-04-01T13:10:14.638Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-28265",
      "date": "2026-09-23",
      "epss": "0.00117",
      "percentile": "0.01867"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 500T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 1000T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 1200T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 3000T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 3200Q",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 3200T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 5000T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 5200Q",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 5200T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 7000T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 9000T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "PowerStore 9200T",
                "vendor": "Dell",
                "versions": [
                  {
                    "lessThan": "4.4.0.0-2692403 or later",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "security_alert@emc.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:dell:powerstoreos:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "347772B4-3FD7-4BEE-91D1-AF178CFC508E",
                    "versionEndExcluding": "4.3.1.1",
                    "versionStartIncluding": "4.3.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FD5BE2B0-BB56-4E6C-8818-26910B23CE31",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AB965674-7EBA-437E-A13B-39BC3F3FE139",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "861B5BE7-159A-41FF-9658-D243051CAC88",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8456D5B0-3D6A-4020-B693-D949EE2BA12E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E0A29ED1-5CE6-4D49-A079-7F4E6D782DE1",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2D5EE934-AD08-4C2B-B3EA-878975EE825E",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6B529671-71A1-428C-BC17-C8E002222FEA",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_5200q:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B7CD86DB-77F8-45C8-848C-DD9DE9DA966D",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F0FCFFD4-A989-4AF3-99DF-32AE2547D9C1",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "37E8CD6E-65F4-48A0-B796-93E4EE51BD06",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9BB1B88-C9C0-4B08-84C6-279C79E34CD3",
                    "vulnerable": false
                  },
                  {
                    "criteria": "cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F90EFCBC-F720-4426-8043-EB1489820C22",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files."
          }
        ],
        "id": "CVE-2026-28265",
        "lastModified": "2026-09-11T13:30:54.337",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 2.5,
              "source": "security_alert@emc.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.2,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-28265",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-01T13:10:06.196625Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-04-01T08:16:05.490",
        "references": [
          {
            "source": "security_alert@emc.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.dell.com/support/kbdoc/en-us/000444169/dsa-2026-157-dell-powerstore-t-security-update-for-multiple-vulnerabilities"
          }
        ],
        "sourceIdentifier": "security_alert@emc.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-35"
              }
            ],
            "source": "security_alert@emc.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-22"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-02T10:53:17+00:00",
      "cve": "CVE-2026-28265",
      "id": "CVE-2026-28265",
      "initial_release_date": "2026-03-25T06:30:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-28265",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-28265.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-28265",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-01T13:10:06.196625Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-01T13:10:11.069Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 500T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 1000T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 1200T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 3000T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 3200Q",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 3200T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 5000T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 5200Q",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 5200T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 7000T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 9000T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "PowerStore 9200T",
              "vendor": "Dell",
              "versions": [
                {
                  "lessThan": "4.4.0.0-2692403 or later",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "datePublic": "2026-03-25T06:30:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files."
                }
              ],
              "value": "PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-35",
                  "description": "CWE-35: Path Traversal",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-01T07:41:28.180Z",
            "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
            "shortName": "dell"
          },
          "references": [
            {
              "url": "https://www.dell.com/support/kbdoc/en-us/000444169/dsa-2026-157-dell-powerstore-t-security-update-for-multiple-vulnerabilities"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 1.0.1"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "assignerShortName": "dell",
        "cveId": "CVE-2026-28265",
        "datePublished": "2026-04-01T07:41:28.180Z",
        "dateReserved": "2026-02-25T18:04:25.462Z",
        "dateUpdated": "2026-04-01T13:10:14.638Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…