Vulnerability intelligence

CVE-2026-67271

Dell PowerStore 500T CWE-787

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service and remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for remote code execution.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

0.8%

Riskier than 56% of all CVEs · checked 2026-10-04

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published