CVE-2026-67262

8.1 Élevée

Publiée le 18/08/2026 à 20:19 · Modifiée le 20/08/2026 à 15:02 · En attente d'analyse NVD · Source : security_alert@emc.com

Description

Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.

Traduire en français

Produits concernés

Dell PowerStore 500T
Dell PowerStore 1000T
Dell PowerStore 1200T
Dell PowerStore 3000T
Dell PowerStore 3200Q
Dell PowerStore 3200T
Dell PowerStore 5000T
Dell PowerStore 5200Q
Dell PowerStore 5200T
Dell PowerStore 7000T
Dell PowerStore 9000T
Dell PowerStore 9200T

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.1 Élevée	security_alert@emc.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-862

Références

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories