Vulnerability · Published Aug 18, 2026 · Assigned by dell
CVE-2026-67262
High 8.1
In plain English
A high-severity missing authorization in PowerStore 1000T from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.4%top 66.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | PowerStore 500T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 1000T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 1200T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 3000T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 3200Q | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 3200T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 5000T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 5200Q | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 5200T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 7000T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 9000T | 0 – before 5.0.0.2-2761110 or later |
| Dell | PowerStore 9200T | 0 – before 5.0.0.2-2761110 or later |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H