CVE-2026-70415
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service.
Risk Assessment
Risk of remote code execution and service disruption, potentially leading to availability and integrity compromise.
Recommendation
Apply patches provided by Dell and restrict remote access to NFS/RPC services.
Other vulnerabilities in Dell PowerStore SDNAS
See all- CVE-2026-79687Critical
Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this, leading to filesystem access.
- CVE-2026-67271Critical
Dell PowerStore SDNAS contains an out-of-bounds write vulnerability in SMB/CIFS. An unauthenticated remote attacker can send a specially crafted SMB packet causing a crash (persistent if auto-restart is enabled) and potentially remote code execution.
Original NVD description (English source)
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS