Vulnerability intelligence

CVE-2026-67262

Dell PowerStore 500T CWE-862

Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.

CVSS Score

8.1

High

EPSS — Exploit Probability

0.4%

Riskier than 31% of all CVEs · checked 2026-09-28

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published