9.8
Critical
CVE-2026-67271 Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS
Description
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerStore 500T | Versions not published | |
| PowerStore 1000T | Versions not published | |
| PowerStore 1200T | Versions not published | |
| PowerStore 3000T | Versions not published | |
| PowerStore 3200Q | Versions not published | |
| PowerStore 3200T | Versions not published | |
| PowerStore 5000T | Versions not published | |
| PowerStore 5200Q | Versions not published | |
| PowerStore 5200T | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerStore 7000T | Versions not published | |
| PowerStore 9000T | Versions not published | |
| PowerStore 9200T | Versions not published |
Other CVEs of PowerStore 500T
The 18 CVEs of PowerStore 500T →
CVE-2026-58566
Dell PowerStore, an Incorrect Authorization vulnerability
8.8
High
CVE-2026-79687
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability
9.0
Critical
CVE-2026-58567
Dell PowerStore contains an OS Command Injection vulnerability
8.8
High
CVE-2026-79682
Dell PowerStore contains a Command Injection vulnerability
8.8
High