CVE-2026-107523
Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it...
Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
What each source reports
CVE List Score used
Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.
- Record
CVE-2026-107523- CVSS 3.1
- 8.7 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-13
GitHub AdvisoriesGHSA-x4rg-wrqx-v23x
Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it...
Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.
- Record
GHSA-x4rg-wrqx-v23x- CVSS 3.1
- 8.7 High
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-13
Affected products
- dell powerstore 1000t
- dell powerstore 1200t
- dell powerstore 1500
- dell powerstore 3000t
- dell powerstore 3200q
- dell powerstore 3200t
- dell powerstore 5000t
- dell powerstore 500t
- dell powerstore 5200q
- dell powerstore 5200t
- dell powerstore 5500
- dell powerstore 7000t
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-107523 is a high vulnerability (CVSS 8.7) in Dell Powerstore 1000t, published November 13, 2026. No source lists public exploit code. No source names a fixed version.