CVE-2026-67271
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Dell PowerStore SDNAS contains an out-of-bounds write vulnerability in SMB/CIFS. An unauthenticated remote attacker can send a specially crafted SMB packet causing a crash (persistent if auto-restart is enabled) and potentially remote code execution.
Risk Assessment
Critical risk: attack can lead to denial of service and full system compromise, impacting data integrity and confidentiality.
Recommendation
Apply vendor patches and restrict SMB/CIFS access to trusted networks only.
Other vulnerabilities in Dell PowerStore SDNAS
See all- CVE-2026-79687Critical
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this, leading to filesystem access.
- CVE-2026-70415High
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service.
Original NVD description (English source)
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for remote code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS