CVE-2026-107522
Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could...
Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege escalation to administrator.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
CVE List Score used
Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege escalation to administrator.
- Record
CVE-2026-107522- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-13
GitHub AdvisoriesGHSA-5fhc-49f5-pmx6
Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could...
Dell PowerStore contains an Improper Authorization vulnerability. An authenticated user could exploit this vulnerability, potentially leading to privilege escalation to administrator.
- Record
GHSA-5fhc-49f5-pmx6- CVSS 3.1
- 7.2 High
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-13
Affected products
- dell powerstore 1000t
- dell powerstore 1200t
- dell powerstore 1500
- dell powerstore 3000t
- dell powerstore 3200q
- dell powerstore 3200t
- dell powerstore 5000t
- dell powerstore 500t
- dell powerstore 5200q
- dell powerstore 5200t
- dell powerstore 5500
- dell powerstore 7000t
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-107522 is a high vulnerability (CVSS 7.2) in Dell Powerstore 1000t, published November 13, 2026. No source lists public exploit code. No source names a fixed version.