{"id":"CVE-2026-82179","kind":"vulnerability","aliases":["CVE-2026-82179"],"related":[],"title":"Dell PowerStore: authenticated admin can bypass multi-approver controls","description":"Dell PowerStore contains an authorization bypass vulnerability. An authenticated administrator could exploit this vulnerability to bypass multi-approver controls on critical operations.","summary":"Dell PowerStore storage appliances have an authorization bypass. An authenticated administrator can skip the multi-approver controls that normally gate critical operations.","severity":"medium","cvss":4.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell-powerstore","infrastructure","storage"],"not_affected_if":["no-powerstore"],"how_to_check":"- Confirm whether the PowerStore appliance is in use and which software version it runs (unknown in the sources)\n- Check Dell's advisory for the affected version ranges (unknown in the sources)","fix":null,"status":"open","published_at":"2026-11-13T14:18:00+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","triaged_at":"2026-11-13T15:21:35+00:00","updated_at":"2026-11-13T15:21:35+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-13T15:21:35Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Dell PowerStore: authenticated admin can bypass multi-approver controls","impact":"medium","summary":"Dell PowerStore storage appliances have an authorization bypass. An authenticated administrator can skip the multi-approver controls that normally gate critical operations.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"Admin bypasses approval controls on critical storage operations","analyst_note":"Find Dell's advisory for CVE-2026-82179 to get affected versions, fixed versions and the operations covered.","how_to_check":"- Confirm whether the PowerStore appliance is in use and which software version it runs (unknown in the sources)\n- Check Dell's advisory for the affected version ranges (unknown in the sources)","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-powerstore"],"who_is_affected":"Organizations running Dell PowerStore storage where multiple administrators must approve critical operations. The sources do not name affected versions or the exact operations. Teams without PowerStore can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000684,"input_tokens":4496,"output_tokens":469,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-82179':13A,16A 'admin':4A 'administr':32B,54C 'applianc':25B 'approv':9A,38B,63C 'authent':3A,31B,53C 'author':28B,49C 'bypass':6A,29B,50C,60C 'contain':47C 'control':10A,39B,64C 'could':55C 'critic':43B,66C 'cve':11A,14A 'dell':1A,18B,22B,45C 'dell-powerstor':17B 'exploit':56C 'gate':42B 'infrastructur':20B 'multi':8A,37B,62C 'multi-approv':7A,36B,61C 'normal':41B 'oper':44B,67C 'powerstor':2A,19B,23B,46C 'skip':34B 'storag':21B,24B 'vulner':51C,58C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerStore storage where multiple administrators must approve critical operations. The sources do not name affected versions or the exact operations. Teams without PowerStore can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dellpowerstore","infrastructure","medium","storage"],"campaign_type":null,"search_a":"'-2026':12A,15A '-82179':13A,16A 'admin':4A 'approv':9A 'authent':3A 'bypass':6A 'control':10A 'cve':11A,14A 'dell':1A 'multi':8A 'multi-approv':7A 'powerstor':2A","search_b":"'administr':32B 'applianc':25B 'approv':38B 'authent':31B 'author':28B 'bypass':29B 'control':39B 'critic':43B 'dell':18B,22B 'dell-powerstor':17B 'gate':42B 'infrastructur':20B 'multi':37B 'multi-approv':36B 'normal':41B 'oper':44B 'powerstor':19B,23B 'skip':34B 'storag':21B,24B","search_c":"'administr':54C 'approv':63C 'authent':53C 'author':49C 'bypass':50C,60C 'contain':47C 'control':64C 'could':55C 'critic':66C 'dell':45C 'exploit':56C 'multi':62C 'multi-approv':61C 'oper':67C 'powerstor':46C 'vulner':51C,58C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T14:18:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82179","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82179","severity":null,"published_at":"2026-11-13T14:18:00+00:00","modified_at":"2026-11-13T14:18:00+00:00","first_seen_at":"2026-11-13T15:19:49+00:00","fetched_at":"2026-11-13T15:19:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}