{"id":"CVE-2026-82174","kind":"vulnerability","aliases":["CVE-2026-82174"],"related":[],"title":"Dell PowerStore: login page content injection enables phishing lures","description":"Dell PowerStore contains a content-injection vulnerability. An unauthenticated attacker could exploit this vulnerability to display misleading text on the genuine login page for phishing.","summary":"Dell PowerStore has a content-injection flaw that lets an attacker show misleading text on the genuine login page. An attacker can use this to make phishing attempts look like they come from the real product.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-powerstore","storage","vendor"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-13T16:19:33+00:00","first_seen_at":"2026-11-13T16:47:35+00:00","triaged_at":"2026-11-13T16:48:59+00:00","updated_at":"2026-11-13T16:48:59+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-13T16:48:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Dell PowerStore: login page content injection enables phishing lures","impact":"low","summary":"Dell PowerStore has a content-injection flaw that lets an attacker show misleading text on the genuine login page. An attacker can use this to make phishing attempts look like they come from the real product.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["dell-powerstore","storage"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Users are shown misleading text on the real login page and may be phished.","analyst_note":"Find Dell's security advisory for CVE-2026-82174 to get affected versions, fixed versions and mitigation.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run Dell PowerStore storage arrays with a web management login page exposed to users. The sources do not state which versions are affected or which configurations are exposed.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000647,"input_tokens":4495,"output_tokens":395,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-82174':12A,15A 'attack':32B,42B,68C 'attempt':49B 'come':53B 'contain':60C 'content':5A,26B,63C 'content-inject':25B,62C 'could':69C 'cve':10A,13A 'dell':1A,17B,21B,58C 'dell-powerstor':16B 'display':74C 'enabl':7A 'exploit':70C 'flaw':28B 'genuin':38B,79C 'inject':6A,27B,64C 'let':30B 'like':51B 'login':3A,39B,80C 'look':50B 'lure':9A 'make':47B 'mislead':34B,75C 'page':4A,40B,81C 'phish':8A,48B,83C 'powerstor':2A,18B,22B,59C 'product':57B 'real':56B 'show':33B 'storag':19B 'text':35B,76C 'unauthent':67C 'use':44B 'vendor':20B 'vulner':65C,72C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Dell PowerStore storage arrays with a web management login page exposed to users. The sources do not state which versions are affected or which configurations are exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dellpowerstore","medium","storage","vendor"],"campaign_type":null,"search_a":"'-2026':11A,14A '-82174':12A,15A 'content':5A 'cve':10A,13A 'dell':1A 'enabl':7A 'inject':6A 'login':3A 'lure':9A 'page':4A 'phish':8A 'powerstor':2A","search_b":"'attack':32B,42B 'attempt':49B 'come':53B 'content':26B 'content-inject':25B 'dell':17B,21B 'dell-powerstor':16B 'flaw':28B 'genuin':38B 'inject':27B 'let':30B 'like':51B 'login':39B 'look':50B 'make':47B 'mislead':34B 'page':40B 'phish':48B 'powerstor':18B,22B 'product':57B 'real':56B 'show':33B 'storag':19B 'text':35B 'use':44B 'vendor':20B","search_c":"'attack':68C 'contain':60C 'content':63C 'content-inject':62C 'could':69C 'dell':58C 'display':74C 'exploit':70C 'genuin':79C 'inject':64C 'login':80C 'mislead':75C 'page':81C 'phish':83C 'powerstor':59C 'text':76C 'unauthent':67C 'vulner':65C,72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T16:19:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82174","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82174","severity":null,"published_at":"2026-11-13T16:19:33+00:00","modified_at":"2026-11-13T16:19:33+00:00","first_seen_at":"2026-11-13T16:47:35+00:00","fetched_at":"2026-11-13T16:47:35+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}