{"id":"CVE-2026-82177","kind":"vulnerability","aliases":["CVE-2026-82177"],"related":[],"title":"Dell PowerStore: high-privilege attacker can run root commands on appliance","description":"Dell PowerStore contains an OS Command Injection vulnerability. A high-privileged attacker could exploit this vulnerability, potentially leading to arbitrary root command execution on the appliance.","summary":"Dell PowerStore storage appliances contain an OS command injection flaw. A high-privileged attacker can inject operating system commands and run them as root on the appliance.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStore T OS","fixed":["5.1.0.0-2798105"],"affected":"< 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["appliance","dell-powerstore","infrastructure","self-hosted","storage"],"not_affected_if":["no-powerstore-deployed"],"how_to_check":"In PowerStore Manager (Settings > Support / Cluster) note the PowerStore OS version; if it is earlier than 5.1.0.0-2798105 you are affected. Dell's DSA-2026-479 lists PowerStore 500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 7000T, 9000T, 9200T, 1500, 5500, 9500. Exploitation requires a high-privileged (admin) account, so also review who holds admin access.","fix":"Upgrade PowerStore T OS to 5.1.0.0-2798105 or later (Dell DSA-2026-479). Dell lists no workaround.","status":"open","published_at":"2026-11-13T14:18:00+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","triaged_at":"2026-11-13T15:21:15+00:00","updated_at":"2026-11-13T15:22:13+00:00","category":"infrastructure","confidence":0.8,"triage":{"at":"2026-11-13T15:21:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerStore: high-privilege attacker can run root commands on appliance","impact":"high","summary":"Dell PowerStore storage appliances contain an OS command injection flaw. A high-privileged attacker can inject operating system commands and run them as root on the appliance.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage","appliance"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker runs arbitrary commands as root on the appliance","analyst_note":"Check Dell's PSA for CVE-2026-82177 for affected PowerStore versions and the fixed release.","how_to_check":"- Confirm whether your environment runs Dell PowerStore (`unknown` which firmware versions are affected; the sources do not list ranges)\n- Check the PowerStore software version against Dell's security advisory for this CVE (unknown from the sources)","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-powerstore-deployed"],"who_is_affected":"Organizations running Dell PowerStore storage appliances. The exploit requires high-level privileges on the appliance, so exposure depends on who holds administrative accounts. The sources do not list affected versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000699,"input_tokens":4503,"output_tokens":497,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check Dell's PSA for CVE-2026-82177 for affected PowerStore versions and the fixed release.","search":"'-2026':14A,17A '-82177':15A,18A 'applianc':12A,22B,34B,58B,85C 'arbitrari':79C 'attack':6A,45B,71C 'command':10A,38B,50B,64C,81C 'contain':35B,61C 'could':72C 'cve':13A,16A 'dell':1A,24B,31B,59C 'dell-powerstor':23B 'execut':82C 'exploit':73C 'flaw':40B 'high':4A,43B,69C 'high-privileg':3A,42B,68C 'host':29B 'infrastructur':26B 'inject':39B,47B,65C 'lead':77C 'oper':48B 'os':21A,37B,63C 'potenti':76C 'powerstor':2A,25B,32B,60C 'powerstore':19A 'privileg':5A,44B,70C 'root':9A,55B,80C 'run':8A,52B 'self':28B 'self-host':27B 'storag':30B,33B 'system':49B 't':20A 'vulner':66C,75C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerStore T appliances (all listed models) on PowerStore OS earlier than 5.1.0.0-2798105. An attacker needs high privileges (network, admin-level account) and can then run commands as root on the appliance. Organisations with no PowerStore can skip it; risk is lower where admin access is tightly controlled.","tier":"B","verified":{"fix":{"at":"2026-11-13T15:22:13Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3884},"products":{"at":"2026-11-13T15:22:13Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3884},"how_to_check":{"at":"2026-11-13T15:22:13Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3884},"who_affected":{"at":"2026-11-13T15:22:13Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3884}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["powerstoretos","tos"],"ptokens":["os","powerstore"],"labels":["appliance","dellpowerstore","high","infrastructure","selfhosted","storage"],"campaign_type":null,"search_a":"'-2026':14A,17A '-82177':15A,18A 'applianc':12A 'attack':6A 'command':10A 'cve':13A,16A 'dell':1A 'high':4A 'high-privileg':3A 'os':21A 'powerstor':2A 'powerstore':19A 'privileg':5A 'root':9A 'run':8A 't':20A","search_b":"'applianc':22B,34B,58B 'attack':45B 'command':38B,50B 'contain':35B 'dell':24B,31B 'dell-powerstor':23B 'flaw':40B 'high':43B 'high-privileg':42B 'host':29B 'infrastructur':26B 'inject':39B,47B 'oper':48B 'os':37B 'powerstor':25B,32B 'privileg':44B 'root':55B 'run':52B 'self':28B 'self-host':27B 'storag':30B,33B 'system':49B","search_c":"'applianc':85C 'arbitrari':79C 'attack':71C 'command':64C,81C 'contain':61C 'could':72C 'dell':59C 'execut':82C 'exploit':73C 'high':69C 'high-privileg':68C 'inject':65C 'lead':77C 'os':63C 'potenti':76C 'powerstor':60C 'privileg':70C 'root':80C 'vulner':66C,75C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T14:18:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82177","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82177","severity":null,"published_at":"2026-11-13T14:18:00+00:00","modified_at":"2026-11-13T14:18:00+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","fetched_at":"2026-11-13T15:19:49+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-82177:3884","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T15:22:13+00:00","modified_at":"2026-11-13T15:22:13+00:00","first_seen_at":"2026-11-13T15:22:13+00:00","fetched_at":"2026-11-13T15:22:13+00:00","note":"Dell DSA-2026-479 (rev 1.0, 2026-10-30) lists CVE-2026-82177; fix is PowerStoreT OS 5.1.0.0-2798105 or later; no workaround in advisory. Advisory table read via page summary; versions older than the 5.1.x line not separately listed. No exploitation or PoC checked beyond advisory.","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}