{"id":"CVE-2026-111545","kind":"vulnerability","aliases":["CVE-2026-111545"],"related":[],"title":"Dell PowerStore: SQL injection lets a logged-in user read keys and alter certificates","description":"Dell PowerStore contains a SQL Injection vulnerability. An authenticated attacker could exploit this vulnerability, potentially leading to disclosure of stored private keys and tampering with trusted certificates.","summary":"Dell PowerStore storage appliances have a SQL injection flaw. An authenticated attacker can reach stored private keys and tamper with trusted certificates.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStoreT OS","fixed":["5.1.0.0-2798105"],"affected":"5.1.x < 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["dell-powerstore","enterprise","infrastructure","self-hosted","storage"],"not_affected_if":["no-powerstore","powerstore-os-5.1.0.0-2798105-or-later"],"how_to_check":"- In PowerStore Manager (Settings > Support/Software) or the CLI, read the PowerStoreT OS version.\n- Exposed if the appliance runs PowerStoreT OS 5.1.x earlier than 5.1.0.0-2798105. Dell's DSA-2026-479 lists 500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 7000T, 9000T, 9200T, 1500, 5500, 9500.\n- Needs a valid (authenticated) account, so also review who holds PowerStore logins.","fix":"Upgrade PowerStoreT OS to 5.1.0.0-2798105 or later (from each model's Dell support drivers page).","status":"open","published_at":"2026-11-13T16:17:26+00:00","first_seen_at":"2026-11-13T16:47:32+00:00","triaged_at":"2026-11-13T16:48:15+00:00","updated_at":"2026-11-13T16:50:30+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-13T16:48:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Dell PowerStore: SQL injection lets a logged-in user read keys and alter certificates","impact":"high","summary":"Dell PowerStore storage appliances have a SQL injection flaw. An authenticated attacker can reach stored private keys and tamper with trusted certificates.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage","enterprise"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker reads stored private keys and alters trusted certificates","analyst_note":"Find Dell's security advisory for CVE-2026-111545 to get affected and fixed PowerStore versions and the attack surface; the NVD entry alone gives no product ranges.","how_to_check":"- Check whether your environment runs Dell PowerStore storage appliances\n- Confirm the PowerStore software version against the Dell advisory: unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-powerstore"],"who_is_affected":"Organisations running Dell PowerStore storage appliances. The sources do not say which PowerStore versions or configurations are affected, and they do not say which interface the SQL injection is reachable through beyond requiring an authenticated user.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.0007,"input_tokens":4507,"output_tokens":498,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Dell's security advisory for CVE-2026-111545 to get affected and fixed PowerStore versions and the attack surface; the NVD entry alone gives no product ranges.","search":"'-111545':18A,21A '-2026':17A,20A 'alter':14A 'applianc':36B 'attack':44B,64C 'authent':43B,63C 'certif':15A,54B,81C 'contain':57C 'could':65C 'cve':16A,19A 'dell':1A,25B,33B,55C 'dell-powerstor':24B 'disclosur':72C 'enterpris':27B 'exploit':66C 'flaw':41B 'host':31B 'infrastructur':28B 'inject':4A,40B,60C 'key':12A,49B,76C 'lead':70C 'let':5A 'log':8A 'logged-in':7A 'os':23A 'potenti':69C 'powerstor':2A,26B,34B,56C 'powerstoret':22A 'privat':48B,75C 'reach':46B 'read':11A 'self':30B 'self-host':29B 'sql':3A,39B,59C 'storag':32B,35B 'store':47B,74C 'tamper':51B,78C 'trust':53B,80C 'user':10A 'vulner':61C,68C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerStore T appliances on PowerStoreT OS 5.1.x older than 5.1.0.0-2798105. Exploiting it needs a valid login (CVSS PR:L, network reachable); the result is disclosure of stored private keys and tampering with trusted certificates. Anyone without PowerStore can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-13T16:50:30Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3907},"products":{"at":"2026-11-13T16:50:30Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3907},"how_to_check":{"at":"2026-11-13T16:50:30Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3907},"who_affected":{"at":"2026-11-13T16:50:30Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3907}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["os","powerstoretos"],"ptokens":["os","powerstoret"],"labels":["dellpowerstore","enterprise","high","infrastructure","selfhosted","storage"],"campaign_type":null,"search_a":"'-111545':18A,21A '-2026':17A,20A 'alter':14A 'certif':15A 'cve':16A,19A 'dell':1A 'inject':4A 'key':12A 'let':5A 'log':8A 'logged-in':7A 'os':23A 'powerstor':2A 'powerstoret':22A 'read':11A 'sql':3A 'user':10A","search_b":"'applianc':36B 'attack':44B 'authent':43B 'certif':54B 'dell':25B,33B 'dell-powerstor':24B 'enterpris':27B 'flaw':41B 'host':31B 'infrastructur':28B 'inject':40B 'key':49B 'powerstor':26B,34B 'privat':48B 'reach':46B 'self':30B 'self-host':29B 'sql':39B 'storag':32B,35B 'store':47B 'tamper':51B 'trust':53B","search_c":"'attack':64C 'authent':63C 'certif':81C 'contain':57C 'could':65C 'dell':55C 'disclosur':72C 'exploit':66C 'inject':60C 'key':76C 'lead':70C 'potenti':69C 'powerstor':56C 'privat':75C 'sql':59C 'store':74C 'tamper':78C 'trust':80C 'vulner':61C,68C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T16:17:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111545","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111545","severity":null,"published_at":"2026-11-13T16:17:26+00:00","modified_at":"2026-11-13T16:17:26+00:00","first_seen_at":"2026-11-13T16:47:32+00:00","fetched_at":"2026-11-13T16:47:32+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-111545:3907","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T16:50:30+00:00","modified_at":"2026-11-13T16:50:30+00:00","first_seen_at":"2026-11-13T16:50:30+00:00","fetched_at":"2026-11-13T16:50:30+00:00","note":"Dell DSA-2026-479 (read in full table via fetch): PowerStoreT OS 5.1.x before 5.1.0.0-2798105 affected on 15 models; fixed in 5.1.0.0-2798105+. No Dell workaround listed; no exploitation reported. Interface not stated by Dell.","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}