CVE-2026-67262
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls.
Risk Assessment
The risk includes unauthorized access to data on LUNs, which could lead to confidentiality and integrity breaches.
Recommendation
It is recommended to update Dell PowerStore to a patched version and review LUN access control configuration.
Original NVD description (English source)
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.