{"id":"CVE-2026-116411","kind":"vulnerability","aliases":["CVE-2026-116411"],"related":[],"title":"Dell PowerStore: authenticated low-privilege user can reach internal services","description":"Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.","summary":"Dell PowerStore storage appliances contain a server-side request forgery flaw. An authenticated user with limited privileges can make the appliance send requests to internal services, which can leak information.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStoreT OS","fixed":["5.1.0.0-2798105"],"affected":"5.1.x < 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["dell-powerstore","infrastructure","on-prem","ssrf","storage"],"not_affected_if":["no-powerstore"],"how_to_check":"In PowerStore Manager (Settings > Support/Software) or via the REST API, read the PowerStoreT OS version. On the 5.1.x train, anything below 5.1.0.0-2798105 is affected per Dell's advisory. The advisory does not state ranges for other trains (4.x, 5.0.x): check with Dell.","fix":"Upgrade PowerStoreT OS to 5.1.0.0-2798105 or later (Dell DSA-2026-479)","status":"open","published_at":"2026-11-13T14:17:48+00:00","first_seen_at":"2026-11-13T15:19:48+00:00","triaged_at":"2026-11-13T15:21:14+00:00","updated_at":"2026-11-13T15:22:06+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-13T15:21:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerStore: authenticated low-privilege user can reach internal services","impact":"medium","summary":"Dell PowerStore storage appliances contain a server-side request forgery flaw. An authenticated user with limited privileges can make the appliance send requests to internal services, which can leak information.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage","on-prem"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"internal services reachable from the appliance leak data","analyst_note":"Find Dell's security advisory for this CVE to confirm affected PowerStore versions and the fixed release; the NVD entry gives no product ranges.","how_to_check":"- Confirm whether your environment runs Dell PowerStore (`unknown` for exact versions; the sources do not list affected ranges)\n- Check the PowerStore advisory from Dell for the affected and fixed versions","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-powerstore"],"who_is_affected":"Organizations running Dell PowerStore storage appliances where users hold limited accounts. Exposure depends on the appliance's management interface reaching internal services; the sources do not give affected versions or configuration details.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000701,"input_tokens":4527,"output_tokens":497,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Dell's security advisory for this CVE to confirm affected PowerStore versions and the fixed release; the NVD entry gives no product ranges.","search":"'-116411':14A,17A '-2026':13A,16A 'applianc':32B,50B 'authent':3A,42B,72C 'contain':33B,62C 'could':77C 'cve':12A,15A 'dell':1A,21B,29B,60C 'dell-powerstor':20B 'disclosur':86C 'exploit':79C 'flaw':40B 'forgeri':39B,68C 'inform':59B,85C 'infrastructur':23B 'intern':10A,54B,90C 'lead':83C 'leak':58B 'limit':45B,75C 'low':5A 'low-privileg':4A 'make':48B 'on-prem':24B 'os':19A 'potenti':78C,82C 'powerstor':2A,22B,30B,61C 'powerstoret':18A 'prem':26B 'privileg':6A,46B,76C 'reach':9A 'request':38B,52B,67C,88C 'send':51B 'server':36B,65C 'server-sid':35B,64C 'servic':11A,55B,91C 'side':37B,66C 'ssrf':27B,69C 'storag':28B,31B 'user':7A,43B,73C 'via':87C 'vulner':70C,81C","nicknames":[],"mitigations":[],"who_affected":"Dell PowerStore appliances (500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 7000T, 9000T, 9200T, 1500, 5500, 9500) running PowerStoreT OS 5.1.x before 5.1.0.0-2798105. Any authenticated user with limited privileges can make the appliance send requests to internal services, which can disclose information. Teams without PowerStore can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-13T15:22:06Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3886},"products":{"at":"2026-11-13T15:22:06Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3886},"who_affected":{"at":"2026-11-13T15:22:06Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3886}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["os","powerstoretos"],"ptokens":["os","powerstoret"],"labels":["dellpowerstore","high","infrastructure","onprem","ssrf","storage"],"campaign_type":null,"search_a":"'-116411':14A,17A '-2026':13A,16A 'authent':3A 'cve':12A,15A 'dell':1A 'intern':10A 'low':5A 'low-privileg':4A 'os':19A 'powerstor':2A 'powerstoret':18A 'privileg':6A 'reach':9A 'servic':11A 'user':7A","search_b":"'applianc':32B,50B 'authent':42B 'contain':33B 'dell':21B,29B 'dell-powerstor':20B 'flaw':40B 'forgeri':39B 'inform':59B 'infrastructur':23B 'intern':54B 'leak':58B 'limit':45B 'make':48B 'on-prem':24B 'powerstor':22B,30B 'prem':26B 'privileg':46B 'request':38B,52B 'send':51B 'server':36B 'server-sid':35B 'servic':55B 'side':37B 'ssrf':27B 'storag':28B,31B 'user':43B","search_c":"'authent':72C 'contain':62C 'could':77C 'dell':60C 'disclosur':86C 'exploit':79C 'forgeri':68C 'inform':85C 'intern':90C 'lead':83C 'limit':75C 'potenti':78C,82C 'powerstor':61C 'privileg':76C 'request':67C,88C 'server':65C 'server-sid':64C 'servic':91C 'side':66C 'ssrf':69C 'user':73C 'via':87C 'vulner':70C,81C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T14:17:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116411","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116411","severity":null,"published_at":"2026-11-13T14:17:48+00:00","modified_at":"2026-11-13T14:17:48+00:00","first_seen_at":"2026-11-13T15:19:48+00:00","fetched_at":"2026-11-13T15:19:48+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116411:3886","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T15:22:06+00:00","modified_at":"2026-11-13T15:22:06+00:00","first_seen_at":"2026-11-13T15:22:06+00:00","fetched_at":"2026-11-13T15:22:06+00:00","note":"Found in Dell DSA-2026-479 (44 CVEs); affected/fixed read from Dell's table. No exploitation reported; no PoC searched beyond advisory. Advisory lists only PowerStoreT OS 5.1.x; older trains not stated.","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}