{"id":"CVE-2026-86356","kind":"vulnerability","aliases":["CVE-2026-86356"],"related":[],"title":"Dell PowerStore: authorization bypass lets a user gain administrator rights","description":"Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator.","summary":"Dell PowerStore storage appliances contain an authorization-bypass flaw that can let a user elevate their privileges to administrator. An attacker who gets any valid access to the system could take full administrative control of the storage array.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"PowerStoreT OS","fixed":["5.1.0.0-2798105"],"affected":">= 5.1.0, < 5.1.0.0-2798105","ecosystem":"vendor"}],"ecosystems":[],"tags":["dell-powerstore","infrastructure","on-prem","self-hosted","storage"],"not_affected_if":[],"how_to_check":"- In PowerStore Manager (or the appliance software info), read the PowerStoreT OS version.\n- Affected: any PowerStoreT OS 5.1.x earlier than 5.1.0.0-2798105. Fixed: 5.1.0.0-2798105 or later.\n- Models listed by Dell: 500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 5200Q, 5200T, 7000T, 9000T, 9200T, 1500, 5500, 9500.\n- Dell's table names only 5.1.x; it does not state whether older release lines (e.g. 4.x) are affected, so confirm with Dell support if you run those.","fix":"Upgrade PowerStoreT OS to 5.1.0.0-2798105 or later (single upgrade covering all DSA-2026-479 CVEs); download from each model's Dell support page.","status":"open","published_at":"2026-11-13T13:18:30+00:00","first_seen_at":"2026-11-13T13:46:52+00:00","triaged_at":"2026-11-13T13:47:53+00:00","updated_at":"2026-11-13T13:49:26+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-13T13:47:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Dell PowerStore: authorization bypass lets a user gain administrator rights","impact":"high","summary":"Dell PowerStore storage appliances contain an authorization-bypass flaw that can let a user elevate their privileges to administrator. An attacker who gets any valid access to the system could take full administrative control of the storage array.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell-powerstore","storage","on-prem"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker gains administrator privileges on the storage appliance","analyst_note":"Find Dell's advisory for CVE-2026-86356 to get affected and fixed PowerStore versions, required privilege level, and whether the flaw is network-reachable.","how_to_check":"- Confirm whether your environment runs Dell PowerStore storage appliances.\n- Check the installed PowerStore software version against the vendor advisory: unknown.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Dell PowerStore storage arrays are potentially exposed. The sources do not state which versions, configurations or roles are affected, so the vendor advisory is needed to confirm scope.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000698,"input_tokens":4492,"output_tokens":498,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Dell's advisory for CVE-2026-86356 to get affected and fixed PowerStore versions, required privilege level, and whether the flaw is network-reachable.","search":"'-2026':12A,15A '-86356':13A,16A 'access':56B 'administr':9A,49B,63B,85C 'applianc':33B 'array':68B 'attack':51B 'author':3A,37B,74C 'authorization-bypass':36B,73C 'bypass':4A,38B,75C 'contain':34B,71C 'control':64B 'could':60B,78C 'cve':11A,14A 'dell':1A,20B,30B,69C 'dell-powerstor':19B 'elev':45B,81C 'flaw':39B 'full':62B 'gain':8A 'get':53B 'host':28B 'infrastructur':22B 'lead':79C 'let':5A,42B 'on-prem':23B 'os':18A 'powerstor':2A,21B,31B,70C 'powerstoret':17A 'prem':25B 'privileg':47B,83C 'right':10A 'self':27B 'self-host':26B 'storag':29B,32B,67B 'system':59B 'take':61B 'user':7A,44B 'valid':55B 'vulner':76C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerStore arrays (T models) on PowerStoreT OS 5.1.x before 5.1.0.0-2798105. Dell rates it CVSS 8.8 with a network vector, low privileges required and no user interaction: an account that can already log in to the appliance could gain administrator rights. Dell gives no more detail on the flaw. Skip it if you do not run PowerStore, or already run 5.1.0.0-2798105 or later.","tier":"B","verified":{"fix":{"at":"2026-11-13T13:49:26Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3880},"products":{"at":"2026-11-13T13:49:26Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3880},"how_to_check":{"at":"2026-11-13T13:49:26Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3880},"who_affected":{"at":"2026-11-13T13:49:26Z","by":"analyst","doc":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","run_id":3880}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["os","powerstoretos"],"ptokens":["os","powerstoret"],"labels":["dellpowerstore","high","infrastructure","onprem","selfhosted","storage"],"campaign_type":null,"search_a":"'-2026':12A,15A '-86356':13A,16A 'administr':9A 'author':3A 'bypass':4A 'cve':11A,14A 'dell':1A 'gain':8A 'let':5A 'os':18A 'powerstor':2A 'powerstoret':17A 'right':10A 'user':7A","search_b":"'access':56B 'administr':49B,63B 'applianc':33B 'array':68B 'attack':51B 'author':37B 'authorization-bypass':36B 'bypass':38B 'contain':34B 'control':64B 'could':60B 'dell':20B,30B 'dell-powerstor':19B 'elev':45B 'flaw':39B 'full':62B 'get':53B 'host':28B 'infrastructur':22B 'let':42B 'on-prem':23B 'powerstor':21B,31B 'prem':25B 'privileg':47B 'self':27B 'self-host':26B 'storag':29B,32B,67B 'system':59B 'take':61B 'user':44B 'valid':55B","search_c":"'administr':85C 'author':74C 'authorization-bypass':73C 'bypass':75C 'contain':71C 'could':78C 'dell':69C 'elev':81C 'lead':79C 'powerstor':70C 'privileg':83C 'vulner':76C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T13:18:30+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-86356","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86356","severity":null,"published_at":"2026-11-13T13:18:30+00:00","modified_at":"2026-11-13T13:18:30+00:00","first_seen_at":"2026-11-13T13:46:52+00:00","fetched_at":"2026-11-13T13:46:52+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-86356:3880","url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","severity":null,"published_at":"2026-11-13T13:49:26+00:00","modified_at":"2026-11-13T13:49:26+00:00","first_seen_at":"2026-11-13T13:49:26+00:00","fetched_at":"2026-11-13T13:49:26+00:00","note":"Dell DSA-2026-479 (read on dell.com) lists CVE-2026-86356 as authorization bypass to administrator, CVSS 8.8 AV:N/PR:L. Fix 5.1.0.0-2798105. No exploitation reported by Dell; no PoC found. Dell lists no workaround. X not checked.","cites":["https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities"]}],"documents":[{"id":146567,"url":"https://www.dell.com/support/kbdoc/en-us/000527640/dsa-2026-479-dell-powerstore-t-security-update-for-multiple-vulnerabilities","title":"DSA-2026-479: Dell PowerStore T Security Update for Multiple Vulnerabilities","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}