medium4.4

CVE-2026-28265

PowerStore, contains a Path Traversal vulnerability in the Service user.

Impact

PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

Affected products

Vendor	Product	Affected versions
Dell	Powerstoreos	from 4.3.0.0 before 4.3.1.1

Weakness classification

CWE-35 CWE-22

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-us/000444169/dsa-2026-157-dell-powerstore-t-security-update-for-multiple-vulnerabilities