Every CVESearch/Get API key

CVE-2026-107524

Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could...

8.8 High

Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

What each source reports

CVE List Score used8.8

Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.

Record
CVE-2026-107524
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-13
EUVDEUVD-2026-1253518.8

Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.

Record
EUVD-2026-125351
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
GitHub AdvisoriesGHSA-h44f-7fw4-58j28.8

Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could...

Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.

Record
GHSA-h44f-7fw4-58j2
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-13

Affected products

Show 3 moreShow less

History

History
RecordedChangedSources
aliases, references, titleGitHub Advisories
aliases, publishedEUVD
first indexedCVE List

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-107524 is a high vulnerability (CVSS 8.8) in Dell Powerstore 1000t, published November 13, 2026. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open