{"id":"CVE-2026-82175","kind":"vulnerability","aliases":["CVE-2026-82175"],"related":[],"title":"Dell PowerStore: server-side request forgery reaches internal network services","description":"Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. A high-privileged attacker could exploit this vulnerability to reach internal network services from the appliance.","summary":"Dell PowerStore storage appliances contain a server-side request forgery flaw. A high-privileged attacker can make the appliance send requests to internal network services.","severity":"low","cvss":3.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-powerstore","infrastructure","storage"],"not_affected_if":["no-powerstore"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-13T15:17:56+00:00","first_seen_at":"2026-11-13T15:46:20+00:00","triaged_at":"2026-11-13T15:50:10+00:00","updated_at":"2026-11-13T15:50:10+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-13T15:50:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerStore: server-side request forgery reaches internal network services","impact":"low","summary":"Dell PowerStore storage appliances contain a server-side request forgery flaw. A high-privileged attacker can make the appliance send requests to internal network services.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"internal network services reached from the appliance","analyst_note":"Find the Dell security advisory for CVE-2026-82175 to confirm affected PowerStore versions and the fixed release.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-powerstore"],"who_is_affected":"Organizations running Dell PowerStore appliances. Exposure requires an attacker with high privileges on the appliance, so teams without PowerStore should skip it. The sources do not name affected versions or the specific feature involved.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000655,"input_tokens":4514,"output_tokens":407,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-82175':14A,17A 'applianc':26B,43B,77C 'attack':39B,65C 'contain':27B,52C 'could':66C 'cve':12A,15A 'dell':1A,19B,23B,50C 'dell-powerstor':18B 'exploit':67C 'flaw':34B 'forgeri':7A,33B,58C 'high':37B,63C 'high-privileg':36B,62C 'infrastructur':21B 'intern':9A,47B,72C 'make':41B 'network':10A,48B,73C 'powerstor':2A,20B,24B,51C 'privileg':38B,64C 'reach':8A,71C 'request':6A,32B,45B,57C 'send':44B 'server':4A,30B,55C 'server-sid':3A,29B,54C 'servic':11A,49B,74C 'side':5A,31B,56C 'ssrf':59C 'storag':22B,25B 'vulner':60C,69C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerStore appliances. Exposure requires an attacker with high privileges on the appliance, so teams without PowerStore should skip it. The sources do not name affected versions or the specific feature involved.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dellpowerstore","infrastructure","low","storage"],"campaign_type":null,"search_a":"'-2026':13A,16A '-82175':14A,17A 'cve':12A,15A 'dell':1A 'forgeri':7A 'intern':9A 'network':10A 'powerstor':2A 'reach':8A 'request':6A 'server':4A 'server-sid':3A 'servic':11A 'side':5A","search_b":"'applianc':26B,43B 'attack':39B 'contain':27B 'dell':19B,23B 'dell-powerstor':18B 'flaw':34B 'forgeri':33B 'high':37B 'high-privileg':36B 'infrastructur':21B 'intern':47B 'make':41B 'network':48B 'powerstor':20B,24B 'privileg':38B 'request':32B,45B 'send':44B 'server':30B 'server-sid':29B 'servic':49B 'side':31B 'storag':22B,25B","search_c":"'applianc':77C 'attack':65C 'contain':52C 'could':66C 'dell':50C 'exploit':67C 'forgeri':58C 'high':63C 'high-privileg':62C 'intern':72C 'network':73C 'powerstor':51C 'privileg':64C 'reach':71C 'request':57C 'server':55C 'server-sid':54C 'servic':74C 'side':56C 'ssrf':59C 'vulner':60C,69C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T15:17:56+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82175","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82175","severity":null,"published_at":"2026-11-13T15:17:56+00:00","modified_at":"2026-11-13T15:17:56+00:00","first_seen_at":"2026-11-13T15:46:20+00:00","fetched_at":"2026-11-13T15:46:20+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}