POWERSTORET OS · CVE-2026-107523 · Vendor
FIX → 5.1.0.0-2798105
Dell PowerStore storage arrays contain an integer overflow that lets an attacker bypass volume bounds checks. A successful attack could destroy data or cause denial of service.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams running Dell PowerStore T appliances on PowerStoreT OS 5.1.x earlier than 5.1.0.0-2798105. The attacker must be network-adjacent and have low privileges (CVSS AV:A/PR:L), so the risk is highest where untrusted hosts share the storage or management network. Teams not running PowerStore can skip it.
Not affected if managed-hosting
Who cares dell-powerstore, on-prem, self-hosted, storage
5.1.0.0-2798105 on any model listed in DSA-2026-479Upgrade to 5.1.0.0-2798105
Update PowerStoreT OS to 5.1.0.0-2798105 or later (per DSA-2026-479; version as reported by securityonline and Eventus, not visible in the part of Dell's page I could read).
Posts are quoted with a link to the original. They are data to us, never instructions.
Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.
This page as .md · .json · CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.