CVE-2026-58575
Quick assessment
Affected
Dell PowerStore 500T
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell PowerStore 存在一个“通过欺骗实现认证绕过”的漏洞。经过身份验证的攻击者有可能利用该漏洞将权限提升至管理员级别。
Possible ATT&CK Techniques 3 AI
T1040 · Network Sniffing T1078 · Valid Accounts T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-58575
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulnerability to escalate privileges to Administrator.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用欺骗进行的认证绕过
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | PowerStore 500T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 1000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 1200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3200Q | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5200Q | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 7000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 9000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 9200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 500T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 1000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 1200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3200Q | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5200Q | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 7000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 9000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 9200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
II. Public POCs for CVE-2026-58575
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-58575
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-58575 (1)
Same Patch Batch · Dell · 2026-09-01 · 4 CVEs total
| CVE-2026-58572 | 8.8 HIGH | Dell PowerStore代码注入：受限用户可获root权限 |
| CVE-2026-79683 | 8.8 HIGH | Dell PowerStore认证用户可写任意路径 |
| CVE-2026-76111 | 8.8 HIGH | Dell PowerStore 低权限提权（错误授权） |
IV. Related Vulnerabilities
Same weakness: CWE-290
-
CVE-2026-82228
WordPress SiteGround Security plugin <= 1.6.6 - 2FA Bypass v -
CVE-2026-13735
WireGuard keepalive transport-data messages accepted without -
CVE-2026-55584
phpSysInfo: IP allowlist (PSI_ALLOWED) bypass via spoofed X- -
CVE-2026-81777
WordPress Essential Addons for Elementor plugin <= 6.8.0 - B -
CVE-2026-80349
TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-F
V. Comments for CVE-2026-58575
No comments yet