CVE-2026-58572
Quick assessment
Affected
Dell PowerStore 500T
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell PowerStore 存在一个代码注入漏洞。拥有有限权限的已认证用户可能利用该漏洞，以 root 权限执行任意代码。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-58572
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | PowerStore 500T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 1000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 1200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3200Q | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5200Q | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 7000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 9000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 9200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 500T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 1000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 1200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3200Q | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5200Q | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 7000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 9000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 9200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
II. Public POCs for CVE-2026-58572
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-58572
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-58572 (1)
Same Patch Batch · Dell · 2026-09-01 · 4 CVEs total
| CVE-2026-79683 | 8.8 HIGH | Dell PowerStore认证用户可写任意路径 |
| CVE-2026-58575 | 8.8 HIGH | Dell PowerStore 认证绕过致提权漏洞 |
| CVE-2026-76111 | 8.8 HIGH | Dell PowerStore 低权限提权（错误授权） |
IV. Related Vulnerabilities
Same weakness: CWE-94
-
CVE-2026-18808
Unauthenticated Remote Code Execution via Code Injection in -
CVE-2026-4813
Code injection in the Lutece Core -
CVE-2026-82666
yaojingang GEOFlow Superadmin Theme Editor SiteThemeEditorCo -
CVE-2026-77956
EEx template evaluation of prompt content in AshAi enables r -
CVE-2026-82598
SeaCMS Template search.php parseIf code injection
V. Comments for CVE-2026-58572
No comments yet