---
id: "CVE-2026-82174"
page: "https://infrastack.ai/live/CVE-2026-82174"
kind: "vulnerability"
aliases: ["CVE-2026-82174"]
title: "Dell PowerStore: login page content injection enables phishing lures"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["dell-powerstore", "storage", "vendor"]
not_affected_if: []
published_at: "2026-11-13T16:19:33+00:00"
first_seen_at: "2026-11-13T16:47:35+00:00"
updated_at: "2026-11-13T16:48:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82174", "first_seen_at": "2026-11-13T16:47:35+00:00"}]
exploit_sources: []
---

# Dell PowerStore: login page content injection enables phishing lures

Link for people: https://infrastack.ai/live/CVE-2026-82174 (this .md is for agents)

Dell PowerStore has a content-injection flaw that lets an attacker show misleading text on the genuine login page. An attacker can use this to make phishing attempts look like they come from the real product.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-13T16:47:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-82174

## From the sources

Dell PowerStore contains a content-injection vulnerability. An unauthenticated attacker could exploit this vulnerability to display misleading text on the genuine login page for phishing.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_