{"id":"CVE-2026-107522","kind":"vulnerability","aliases":["CVE-2026-107522"],"related":[],"title":"Dell PowerStore: authenticated user can escalate to administrator","description":"Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege escalation to administrator.","summary":"Dell PowerStore storage appliances have an improper authorization flaw. A logged-in user with ordinary access could escalate their privileges to administrator.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStoreT OS","fixed":["5.1.0.0-2798105"],"affected":"< 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["dell-powerstore","infrastructure","on-prem","storage"],"not_affected_if":["no-untrusted-accounts"],"how_to_check":"Check the PowerStoreT OS version in the PowerStore Manager GUI (Settings > Software) or via the vendor CLI. Models in DSA-2026-479 running PowerStoreT OS 5.1.x are affected if the version is earlier than 5.1.0.0-2798105. Also review which accounts exist and which hold administrator roles; the CVSS vector requires high privileges (PR:H).","fix":"Upgrade PowerStoreT OS to 5.1.0.0-2798105 or later (Dell DSA-2026-479).","status":"open","published_at":"2026-11-13T15:17:29+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","triaged_at":"2026-11-13T15:48:27+00:00","updated_at":"2026-11-13T15:52:04+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-13T15:48:27Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerStore: authenticated user can escalate to administrator","impact":"high","summary":"Dell PowerStore storage appliances have an improper authorization flaw. A logged-in user with ordinary access could escalate their privileges to administrator.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage","on-prem"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged user gains administrator rights on the storage array","analyst_note":"Find Dell's advisory for this CVE to confirm affected and fixed PowerStore versions and any workaround.","how_to_check":"- Check the PowerStore software version in the management GUI or with the vendor's CLI and compare it against the fixed versions listed by Dell.\n- Review which accounts exist on the array and which hold administrator roles.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-untrusted-accounts"],"who_is_affected":"Organisations running Dell PowerStore arrays where non-administrative users hold valid accounts. Systems where only administrators have access are lower risk. The sources do not list affected versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000684,"input_tokens":4496,"output_tokens":468,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Dell's advisory for this CVE to confirm affected and fixed PowerStore versions and any workaround.","search":"'-107522':11A,14A '-2026':10A,13A 'access':41B 'administr':8A,47B,68C 'applianc':28B 'authent':3A,56C 'author':32B,53C 'contain':50C 'could':42B,58C 'cve':9A,12A 'dell':1A,18B,25B,48C 'dell-powerstor':17B 'escal':6A,43B,66C 'exploit':59C 'flaw':33B 'improp':31B,52C 'infrastructur':20B 'lead':63C 'log':36B 'logged-in':35B 'on-prem':21B 'ordinari':40B 'os':16A 'potenti':62C 'powerstor':2A,19B,26B,49C 'powerstoret':15A 'prem':23B 'privileg':45B,65C 'storag':24B,27B 'user':4A,38B,57C 'vulner':54C,61C","nicknames":[],"mitigations":[],"who_affected":"Organisations running a Dell PowerStore T appliance (500T through 9500, 15 models listed in DSA-2026-479) on PowerStoreT OS 5.1.x earlier than 5.1.0.0-2798105. An authenticated user can exploit an improper authorization flaw to escalate to administrator. Arrays where only trusted administrators hold accounts are lower risk. Dell's page lists no workaround.","tier":"B","verified":{"fix":{"at":"2026-11-13T15:52:04Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3901},"products":{"at":"2026-11-13T15:52:04Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3901}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["os","powerstoretos"],"ptokens":["os","powerstoret"],"labels":["dellpowerstore","high","infrastructure","onprem","storage"],"campaign_type":null,"search_a":"'-107522':11A,14A '-2026':10A,13A 'administr':8A 'authent':3A 'cve':9A,12A 'dell':1A 'escal':6A 'os':16A 'powerstor':2A 'powerstoret':15A 'user':4A","search_b":"'access':41B 'administr':47B 'applianc':28B 'author':32B 'could':42B 'dell':18B,25B 'dell-powerstor':17B 'escal':43B 'flaw':33B 'improp':31B 'infrastructur':20B 'log':36B 'logged-in':35B 'on-prem':21B 'ordinari':40B 'powerstor':19B,26B 'prem':23B 'privileg':45B 'storag':24B,27B 'user':38B","search_c":"'administr':68C 'authent':56C 'author':53C 'contain':50C 'could':58C 'dell':48C 'escal':66C 'exploit':59C 'improp':52C 'lead':63C 'potenti':62C 'powerstor':49C 'privileg':65C 'user':57C 'vulner':54C,61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T15:17:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107522","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107522","severity":null,"published_at":"2026-11-13T15:17:29+00:00","modified_at":"2026-11-13T15:17:29+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","fetched_at":"2026-11-13T15:46:15+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-107522:3901","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T15:52:04+00:00","modified_at":"2026-11-13T15:52:04+00:00","first_seen_at":"2026-11-13T15:52:04+00:00","fetched_at":"2026-11-13T15:52:04+00:00","note":"Found in Dell DSA-2026-479 (2026-10-30, linked). All 15 PowerStore T models on PowerStoreT OS 5.1.x: affected prior to 5.1.0.0-2798105, fixed in 5.1.0.0-2798105 or later. Page lists no workaround. Dell page says 5.1.x only; other OS lines not stated (unknown). No exploitation or PoC seen; X/community search not run.","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}