{"id":"CVE-2026-116412","kind":"vulnerability","aliases":["CVE-2026-116412"],"related":[],"title":"Dell PowerStore: insecure file permissions let a local user read admin credentials","description":"Dell PowerStore contains an insecure-file-permissions vulnerability. A local low-privileged attacker could exploit this vulnerability to disclose administrative credentials.","summary":"Dell PowerStore has a file-permission flaw that lets a low-privileged local user read administrative credentials. An attacker who already has a local foothold on the appliance could use those credentials to take administrative control.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-powerstore","on-prem","storage","vendor"],"not_affected_if":["no-local-low-privilege-users"],"how_to_check":"- Check the installed PowerStore software version against the affected range in Dell's advisory (unknown from the sources given).\n- Review file permissions on PowerStore's credential-bearing files as directed by Dell's advisory (unknown from the sources).","fix":null,"status":"open","published_at":"2026-11-13T14:17:48+00:00","first_seen_at":"2026-11-13T15:19:48+00:00","triaged_at":"2026-11-13T15:21:35+00:00","updated_at":"2026-11-13T15:21:35+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-13T15:21:35Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Dell PowerStore: insecure file permissions let a local user read admin credentials","impact":"high","summary":"Dell PowerStore has a file-permission flaw that lets a low-privileged local user read administrative credentials. An attacker who already has a local foothold on the appliance could use those credentials to take administrative control.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["dell-powerstore","storage","on-prem"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Administrative credentials are readable by a local low-privileged user","analyst_note":"Find Dell's advisory for CVE-2026-116412 to get affected versions, fixed versions and the exact insecure file.","how_to_check":"- Check the installed PowerStore software version against the affected range in Dell's advisory (unknown from the sources given).\n- Review file permissions on PowerStore's credential-bearing files as directed by Dell's advisory (unknown from the sources).","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-low-privilege-users"],"who_is_affected":"Organizations running Dell PowerStore storage appliances where non-administrative local accounts exist. Exposure depends on who can log in locally; the sources do not name the affected versions or the exact files. Systems without local low-privileged users face less risk.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000712,"input_tokens":4498,"output_tokens":524,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116412':15A,18A '-2026':14A,17A 'admin':11A 'administr':44B,63B,86C 'alreadi':49B 'applianc':56B 'attack':47B,79C 'contain':67C 'control':64B 'could':57B,80C 'credenti':12A,45B,60B,87C 'cve':13A,16A 'dell':1A,20B,27B,65C 'dell-powerstor':19B 'disclos':85C 'exploit':81C 'file':4A,32B,71C 'file-permiss':31B 'flaw':34B 'foothold':53B 'insecur':3A,70C 'insecure-file-permiss':69C 'let':6A,36B 'local':8A,41B,52B,75C 'low':39B,77C 'low-privileg':38B,76C 'on-prem':22B 'permiss':5A,33B,72C 'powerstor':2A,21B,28B,66C 'prem':24B 'privileg':40B,78C 'read':10A,43B 'storag':25B 'take':62B 'use':58B 'user':9A,42B 'vendor':26B 'vulner':73C,83C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerStore storage appliances where non-administrative local accounts exist. Exposure depends on who can log in locally; the sources do not name the affected versions or the exact files. Systems without local low-privileged users face less risk.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dellpowerstore","medium","onprem","storage","vendor"],"campaign_type":null,"search_a":"'-116412':15A,18A '-2026':14A,17A 'admin':11A 'credenti':12A 'cve':13A,16A 'dell':1A 'file':4A 'insecur':3A 'let':6A 'local':8A 'permiss':5A 'powerstor':2A 'read':10A 'user':9A","search_b":"'administr':44B,63B 'alreadi':49B 'applianc':56B 'attack':47B 'control':64B 'could':57B 'credenti':45B,60B 'dell':20B,27B 'dell-powerstor':19B 'file':32B 'file-permiss':31B 'flaw':34B 'foothold':53B 'let':36B 'local':41B,52B 'low':39B 'low-privileg':38B 'on-prem':22B 'permiss':33B 'powerstor':21B,28B 'prem':24B 'privileg':40B 'read':43B 'storag':25B 'take':62B 'use':58B 'user':42B 'vendor':26B","search_c":"'administr':86C 'attack':79C 'contain':67C 'could':80C 'credenti':87C 'dell':65C 'disclos':85C 'exploit':81C 'file':71C 'insecur':70C 'insecure-file-permiss':69C 'local':75C 'low':77C 'low-privileg':76C 'permiss':72C 'powerstor':66C 'privileg':78C 'vulner':73C,83C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T14:17:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116412","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116412","severity":null,"published_at":"2026-11-13T14:17:48+00:00","modified_at":"2026-11-13T14:17:48+00:00","first_seen_at":"2026-11-13T15:19:48+00:00","fetched_at":"2026-11-13T15:19:48+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}