CVE-2026-107526
Dell PowerStore contains an improper input validation vulnerability. An authenticated low...
Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
What each source reports
CVE List Score used
Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface.
- Record
CVE-2026-107526- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-20
- Updated
- 2026-11-13
EUVDEUVD-2026-125281
Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface.
- Record
EUVD-2026-125281- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-13
GitHub AdvisoriesGHSA-6gvc-m46j-6552
Dell PowerStore contains an improper input validation vulnerability. An authenticated low...
Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface.
- Record
GHSA-6gvc-m46j-6552- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-20
- Updated
- 2026-11-13
NVD
Dell PowerStore contains an improper input validation vulnerability. An authenticated low-privileged attacker could exploit this vulnerability, potentially leading to stored cross-site scripting in the management interface.
- Record
CVE-2026-107526- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-20
- Updated
- 2026-11-13
Affected products
- dell powerstore 1000t
- dell powerstore 1200t
- dell powerstore 1500
- dell powerstore 3000t
- dell powerstore 3200q
- dell powerstore 3200t
- dell powerstore 5000t
- dell powerstore 500t
- dell powerstore 5200q
- dell powerstore 5200t
- dell powerstore 5500
- dell powerstore 7000t
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, references, title | GitHub Advisories, NVD | |
| aliases, published | EUVD | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-107526 is a medium vulnerability (CVSS 4.6) in Dell Powerstore 1000t, published November 13, 2026. No source lists public exploit code. No source names a fixed version.