CVE-2026-79685

MediumCVSS 6.5/10Last modified Oct 2, 2026

Description

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to gain unauthorized access to sensitive sensitive system information.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

VendorProductVersions
DellPowerStore 500T< 4.1.0.6-2771237 or later
DellPowerStore 1000T< 4.1.0.6-2771237 or later
DellPowerStore 1200T< 4.1.0.6-2771237 or later
DellPowerStore 3000T< 4.1.0.6-2771237 or later
DellPowerStore 3200Q< 4.1.0.6-2771237 or later
DellPowerStore 3200T< 4.1.0.6-2771237 or later
DellPowerStore 5000T< 4.1.0.6-2771237 or later
DellPowerStore 5200Q< 4.1.0.6-2771237 or later
DellPowerStore 5200T< 4.1.0.6-2771237 or later
DellPowerStore 7000T< 4.1.0.6-2771237 or later
DellPowerStore 9000T< 4.1.0.6-2771237 or later
DellPowerStore 9200T< 4.1.0.6-2771237 or later
DellPowerStore 500T< 4.3.1.2-2771239 or later
DellPowerStore 1000T< 4.3.1.2-2771239 or later
DellPowerStore 1200T< 4.3.1.2-2771239 or later
DellPowerStore 3000T< 4.3.1.2-2771239 or later
DellPowerStore 3200Q< 4.3.1.2-2771239 or later
DellPowerStore 3200T< 4.3.1.2-2771239 or later
DellPowerStore 5000T< 4.3.1.2-2771239 or later
DellPowerStore 5200Q< 4.3.1.2-2771239 or later
DellPowerStore 5200T< 4.3.1.2-2771239 or later
DellPowerStore 7000T< 4.3.1.2-2771239 or later
DellPowerStore 9000T< 4.3.1.2-2771239 or later
DellPowerStore 9200T< 4.3.1.2-2771239 or later

References

Timeline

Published
Sep 1, 2026
Last modified
Oct 2, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-796868.8Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially exploCVE-2026-7968710.0Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access CVE-2026-796899.8Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper NeutraliCVE-2026-79694.3Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to byCVE-2026-796903.7Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper CertificCVE-2026-796917.3Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper CertificCVE-2026-796927.3Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control CVE-2026-796933.4Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege ViCVE-2026-796945.5Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of SensCVE-2026-796957.3Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper HandlingCVE-2026-7969610.0A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through 2.6.0 on Python (OSSCVE-2026-796979.9A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610