CVE-2026-76111
Quick assessment
Affected
Dell PowerStore 500T
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell PowerStore 存在一个不正确的授权（Incorrect Authorization）漏洞。一个拥有低权限的已认证攻击者可能利用该漏洞调用仅限管理员使用的操作，从而导致权限提升。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76111
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit this vulnerability to invoke administrator-only operations, leading to privilege escalation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | PowerStore 500T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 1000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 1200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3200Q | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 3200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5200Q | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 5200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 7000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 9000T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 9200T | 0 ~ 4.1.0.6-2771237 or later | - |
|
| Dell | PowerStore 500T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 1000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 1200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3200Q | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 3200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5200Q | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 5200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 7000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 9000T | 0 ~ 4.3.1.2-2771239 or later | - |
|
| Dell | PowerStore 9200T | 0 ~ 4.3.1.2-2771239 or later | - |
|
II. Public POCs for CVE-2026-76111
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76111
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-76111 (1)
IV. Related Vulnerabilities
Same weakness: CWE-863
-
CVE-2026-75921
Master Addons for Elementor <= 3.1.9 - Incorrect Authorizati -
CVE-2026-82747
Ash.Policy.Authorizer returns records denied by a runtime re -
CVE-2026-82749
Ash relationship parent(...) filter degrades to an IS NULL m -
CVE-2026-82748
Ash.Actions.Aggregate authorizes an aggregate under one acti -
CVE-2026-82730
Authorization-redacted field values disclosed through AshTyp
V. Comments for CVE-2026-76111
No comments yet