CVE-2026-111547

HighCVSS 8.1/10Last modified Nov 13, 2026

Description

Dell PowerStore contains an out-of-bounds read vulnerability. An attacker could exploit this vulnerability, potentially leading to denial of service or limited information disclosure.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 13, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1115485.3A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticateCVE-2026-111554.3Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafteCVE-2026-1115517.5Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an array, collection, or byteCVE-2026-1115527.1Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. HyCVE-2026-1115556.0A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk heaCVE-2026-111564.3Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafteCVE-2026-1115607.2Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common BarCVE-2026-111575.4Script injection in Accessibility in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious exCVE-2026-1115736.3Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during CVE-2026-1115747.5The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored as lead entries befCVE-2026-1115777.2The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configuration page, which iCVE-2026-1115787.5The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape several customer-suppli
CVE-2026-111547: High severity, CVSS 8.1 | Vulnix