{"id":"CVE-2026-86355","kind":"vulnerability","aliases":["CVE-2026-86355"],"related":[],"title":"Dell PowerStore: remote user can escalate privileges via file path control","description":"Dell PowerStore contains an External Control of File Name or Path vulnerability. A remote authenticated attacker could exploit this vulnerability, potentially leading to privilege escalation on the appliance.","summary":"Dell PowerStore storage appliances accept file names or paths that an attacker can control. A remote, logged-in attacker can use this to gain higher privileges on the appliance.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStoreT OS","fixed":["5.1.0.0-2798105"],"affected":"5.1.x < 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["dell-powerstore","infrastructure","on-prem","powerstore","storage"],"not_affected_if":["auth-required","no-powerstore-deployed"],"how_to_check":"In PowerStore Manager, check Settings > Cluster/Software for the PowerStoreT OS version; versions prior to 5.1.0.0-2798105 on the 5.1.x train are affected per Dell. Also review which accounts have login to the management interface, since exploitation needs authentication. Dell's table does not address other OS trains; ask Dell support if you run one.","fix":"Upgrade PowerStoreT OS to 5.1.0.0-2798105 or later (Dell DSA-2026-479). Dell states no workaround.","status":"open","published_at":"2026-11-13T13:18:29+00:00","first_seen_at":"2026-11-13T13:46:52+00:00","triaged_at":"2026-11-13T13:47:53+00:00","updated_at":"2026-11-13T13:49:25+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-13T13:47:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerStore: remote user can escalate privileges via file path control","impact":"high","summary":"Dell PowerStore storage appliances accept file names or paths that an attacker can control. A remote, logged-in attacker can use this to gain higher privileges on the appliance.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage","on-prem"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"authenticated remote user gains higher privileges on the appliance","analyst_note":"Find Dell's advisory for CVE-2026-86355 to confirm affected and fixed PowerStore versions and any workaround.","how_to_check":"- Check the PowerStore software version in the Dell management interface against the fixed versions in Dell's advisory (unknown in these sources).\n- Review which accounts hold login access to the PowerStore management interface.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-powerstore-deployed","auth-required"],"who_is_affected":"Organisations that run Dell PowerStore storage appliances with remote management access enabled. The attacker needs valid credentials on the appliance first, so restricting who holds accounts reduces exposure. The sources do not name the affected software versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000711,"input_tokens":4507,"output_tokens":520,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Dell's advisory for CVE-2026-86355 to confirm affected and fixed PowerStore versions and any workaround.","search":"'-2026':13A,16A '-86355':14A,17A 'accept':33B 'applianc':32B,58B,86C 'attack':40B,48B,74C 'authent':73C 'contain':61C 'control':11A,42B,64C 'could':75C 'cve':12A,15A 'dell':1A,21B,29B,59C 'dell-powerstor':20B 'escal':6A,83C 'exploit':76C 'extern':63C 'file':9A,34B,66C 'gain':53B 'higher':54B 'infrastructur':23B 'lead':80C 'log':46B 'logged-in':45B 'name':35B,67C 'on-prem':24B 'os':19A 'path':10A,37B,69C 'potenti':79C 'powerstor':2A,22B,27B,30B,60C 'powerstoret':18A 'prem':26B 'privileg':7A,55B,82C 'remot':3A,44B,72C 'storag':28B,31B 'use':50B 'user':4A 'via':8A 'vulner':70C,78C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerStore T appliances (500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 7000T, 9000T, 9200T, 1500, 5500, 9500) on PowerStoreT OS 5.1.x older than 5.1.0.0-2798105. An attacker needs a valid login on the appliance, then can escalate privileges through a controllable file name or path. Teams with no PowerStore can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-13T13:49:25Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3881},"products":{"at":"2026-11-13T13:49:25Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3881},"how_to_check":{"at":"2026-11-13T13:49:25Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3881},"who_affected":{"at":"2026-11-13T13:49:25Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3881}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["os","powerstoretos"],"ptokens":["os","powerstoret"],"labels":["dellpowerstore","high","infrastructure","onprem","powerstore","storage"],"campaign_type":null,"search_a":"'-2026':13A,16A '-86355':14A,17A 'control':11A 'cve':12A,15A 'dell':1A 'escal':6A 'file':9A 'os':19A 'path':10A 'powerstor':2A 'powerstoret':18A 'privileg':7A 'remot':3A 'user':4A 'via':8A","search_b":"'accept':33B 'applianc':32B,58B 'attack':40B,48B 'control':42B 'dell':21B,29B 'dell-powerstor':20B 'file':34B 'gain':53B 'higher':54B 'infrastructur':23B 'log':46B 'logged-in':45B 'name':35B 'on-prem':24B 'path':37B 'powerstor':22B,27B,30B 'prem':26B 'privileg':55B 'remot':44B 'storag':28B,31B 'use':50B","search_c":"'applianc':86C 'attack':74C 'authent':73C 'contain':61C 'control':64C 'could':75C 'dell':59C 'escal':83C 'exploit':76C 'extern':63C 'file':66C 'lead':80C 'name':67C 'path':69C 'potenti':79C 'powerstor':60C 'privileg':82C 'remot':72C 'vulner':70C,78C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T13:18:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86355","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86355","severity":null,"published_at":"2026-11-13T13:18:29+00:00","modified_at":"2026-11-13T13:18:29+00:00","first_seen_at":"2026-11-13T13:46:52+00:00","fetched_at":"2026-11-13T13:46:52+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-86355:3881","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T13:49:25+00:00","modified_at":"2026-11-13T13:49:25+00:00","first_seen_at":"2026-11-13T13:49:25+00:00","fetched_at":"2026-11-13T13:49:25+00:00","note":"Dell DSA-2026-479 (2026-10-30, rev 1.0) read; lists CVE-2026-86355, fix 5.1.0.0-2798105, no workaround stated. Advisory table lists only the 5.1.x train as affected; other trains not addressed (unknown).","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}