Vulnerability · Published Aug 18, 2026 · Assigned by dell

CVE-2026-70415

High 8.1

In plain English

A high-severity buffer overflow in PowerStore 1000T from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.6%top 50.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service.

Affected products (as reported)

VendorProductVersions
Dell PowerStore 500T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 1000T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 1200T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 3000T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 3200Q 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 3200T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 5000T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 5200Q 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 5200T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 7000T 0 – before 5.0.0.2-2761110 or later
Dell PowerStore 9000T 0 – before 5.0.0.2-2761110 or later
Della PowerStore 9200T 0 – before 5.0.0.2-2761110 or later

Weakness: CWE-120 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References