CVE-2026-103813
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
CVE List Score used
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.
- Record
CVE-2026-103813- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-13
EUVDEUVD-2026-125442
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.
- Record
EUVD-2026-125442- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-13
NVD
Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to privilege escalation to root on the appliance.
- Record
CVE-2026-103813- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-13
Affected products
- dell powerstore 1000t
- dell powerstore 1200t
- dell powerstore 1500
- dell powerstore 3000t
- dell powerstore 3200q
- dell powerstore 3200t
- dell powerstore 5000t
- dell powerstore 500t
- dell powerstore 5200q
- dell powerstore 5200t
- dell powerstore 5500
- dell powerstore 7000t
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| cwes, references, severity | CVE List | |
| first indexed | EUVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-103813 is a critical vulnerability (CVSS 9.1) in Dell Powerstore 1000t, published November 13, 2026. No source lists public exploit code. No source names a fixed version.