Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-58574 |
| Alert Source | GitHub Advisory - Critical vulnerability |
| CVE Year | 2026 |
| Publication Date | 2026-08-31 |
| Vendor | Dell |
| Product | PowerStore (PowerStore T) |
| CVSS Score | 9.8 (Critical) |
| EPSS Score | No data |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
Source: NVD / Dell PSIRT (DSA-2026-330)
Dell PowerStore arrays contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface can read internal system information from the appliance filesystem.
The vendor rates this critical because the exposed data includes credentials granting full administrative access to the array. That changes the nature of the problem: this is not a metadata leak but a path to taking control of the storage layer.
The consequence is immediate for business continuity. Control of the array means access to the volumes of every system that uses it, plus the ability to delete snapshots — the very thing ransomware recovery depends on.
A note on EPSS: the absence of a score does not mean low risk. Fresh CVEs have no EPSS computed yet; what decides here is the 9.8 CVSS and the nature of the exposed data.
Required Actions
- Apply the update per Dell advisory DSA-2026-330 for PowerStore T.
- Verify that the array management interface is reachable only from a dedicated management network. The phrase “restricted management interface” in the advisory assumes a segmentation that is often incomplete in practice.
- After patching, consider rotating the array’s administrative credentials — if the vulnerability was exploited before the patch, the patch itself does not invalidate stolen logins.
Who Is Affected?
The vulnerability affects Dell PowerStore arrays.
PowerStore is a midrange array, deployed where storage was consolidated for virtualisation and databases — in finance, manufacturing, the public sector and among operators. Dell is one of nFlo’s technology partners, so if you need support assessing exposure or segmenting the management network, this is an area we work in daily.
Pay particular attention if the array management interface sits on the same network as administrator workstations — that is the most common way a “restricted” interface stops being restricted.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
