{"id":"CVE-2026-107524","kind":"vulnerability","aliases":["CVE-2026-107524"],"related":[],"title":"Dell PowerStore: integer overflow lets an authenticated host corrupt memory or crash","description":"Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.","summary":"Dell PowerStore storage arrays contain an integer overflow flaw. An authenticated storage host can exploit it to access data out of bounds or cause a denial of service.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStoreT OS","fixed":["5.1.0.0-2798105"],"affected":"< 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["dell-powerstore","enterprise","self-hosted","storage","vendor"],"not_affected_if":["no-authenticated-host-access"],"how_to_check":"In PowerStore Manager (or the cluster info), read the PowerStoreT OS version. Versions prior to 5.1.0.0-2798105 are affected on every model listed in DSA-2026-479. Also relevant only if storage hosts are attached with valid credentials.","fix":"Upgrade PowerStoreT OS to 5.1.0.0-2798105 or later (Dell DSA-2026-479).","status":"open","published_at":"2026-11-13T15:17:29+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","triaged_at":"2026-11-13T15:48:12+00:00","updated_at":"2026-11-13T15:48:51+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-13T15:48:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerStore: integer overflow lets an authenticated host corrupt memory or crash","impact":"medium","summary":"Dell PowerStore storage arrays contain an integer overflow flaw. An authenticated storage host can exploit it to access data out of bounds or cause a denial of service.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["dell-powerstore","storage","enterprise"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"out-of-bounds memory access or denial of service on the storage array","analyst_note":"Confirm affected PowerStore versions and the fixed release from Dell's security advisory; NVD entry lists no product ranges.","how_to_check":"- Check the PowerStore software version in the Dell PowerStore management interface against the Dell advisory.\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-authenticated-host-access"],"who_is_affected":"Organizations running Dell PowerStore storage appliances where a storage host has valid credentials or access. The sources do not list affected version ranges or configuration details.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000675,"input_tokens":4498,"output_tokens":451,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm affected PowerStore versions and the fixed release from Dell's security advisory; NVD entry lists no product ranges.","search":"'-107524':15A,18A '-2026':14A,17A 'access':47B,81C 'array':33B 'authent':7A,40B,66C 'bound':51B,79C 'caus':53B 'contain':34B,60C 'corrupt':9A 'could':69C 'crash':12A 'cve':13A,16A 'data':48B,80C 'dell':1A,22B,30B,58C 'dell-powerstor':21B 'denial':55B,83C 'enterpris':24B 'exploit':44B,70C 'flaw':38B 'host':8A,27B,42B,68C 'integ':3A,36B,62C 'lead':74C 'let':5A 'memori':10A 'os':20A 'out-of-bound':76C 'overflow':4A,37B,63C 'potenti':73C 'powerstor':2A,23B,31B,59C 'powerstoret':19A 'self':26B 'self-host':25B 'servic':57B,85C 'storag':28B,32B,41B,67C 'vendor':29B 'vulner':64C,72C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerStore appliances (500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 7000T, 9000T, 9200T, 1500, 5500, 9500) on PowerStoreT OS before 5.1.0.0-2798105. An authenticated storage host could trigger an integer overflow, which Dell says could lead to out-of-bounds data access or denial of service. Dell's page gives no workaround.","tier":"B","verified":{"fix":{"at":"2026-11-13T15:48:51Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3890},"products":{"at":"2026-11-13T15:48:51Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3890},"how_to_check":{"at":"2026-11-13T15:48:51Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3890}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["os","powerstoretos"],"ptokens":["os","powerstoret"],"labels":["dellpowerstore","enterprise","high","selfhosted","storage","vendor"],"campaign_type":null,"search_a":"'-107524':15A,18A '-2026':14A,17A 'authent':7A 'corrupt':9A 'crash':12A 'cve':13A,16A 'dell':1A 'host':8A 'integ':3A 'let':5A 'memori':10A 'os':20A 'overflow':4A 'powerstor':2A 'powerstoret':19A","search_b":"'access':47B 'array':33B 'authent':40B 'bound':51B 'caus':53B 'contain':34B 'data':48B 'dell':22B,30B 'dell-powerstor':21B 'denial':55B 'enterpris':24B 'exploit':44B 'flaw':38B 'host':27B,42B 'integ':36B 'overflow':37B 'powerstor':23B,31B 'self':26B 'self-host':25B 'servic':57B 'storag':28B,32B,41B 'vendor':29B","search_c":"'access':81C 'authent':66C 'bound':79C 'contain':60C 'could':69C 'data':80C 'dell':58C 'denial':83C 'exploit':70C 'host':68C 'integ':62C 'lead':74C 'out-of-bound':76C 'overflow':63C 'potenti':73C 'powerstor':59C 'servic':85C 'storag':67C 'vulner':64C,72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T15:17:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107524","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107524","severity":null,"published_at":"2026-11-13T15:17:29+00:00","modified_at":"2026-11-13T15:17:29+00:00","first_seen_at":"2026-11-13T15:46:15+00:00","fetched_at":"2026-11-13T15:46:15+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-107524:3890","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T15:48:51+00:00","modified_at":"2026-11-13T15:48:51+00:00","first_seen_at":"2026-11-13T15:48:51+00:00","fetched_at":"2026-11-13T15:48:51+00:00","note":"Dell DSA-2026-479 (2026-10-30) read: all 15 PowerStore models, PowerStoreT OS before 5.1.0.0-2798105; fix 5.1.0.0-2798105 or later; no workaround listed. No exploitation or PoC checked/found in advisory.","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}