CVE-2026-116411
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated...
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
CVE List Score used
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.
- Record
CVE-2026-116411- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-13
EUVDEUVD-2026-125339
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.
- Record
EUVD-2026-125339- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-13
GitHub AdvisoriesGHSA-q422-f84j-mr32
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated...
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.
- Record
GHSA-q422-f84j-mr32- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-13
NVD
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability, potentially leading to information disclosure via requests to internal services.
- Record
CVE-2026-116411- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-13
Affected products
- dell powerstore 1000t
- dell powerstore 1200t
- dell powerstore 1500
- dell powerstore 3000t
- dell powerstore 3200q
- dell powerstore 3200t
- dell powerstore 5000t
- dell powerstore 500t
- dell powerstore 5200q
- dell powerstore 5200t
- dell powerstore 5500
- dell powerstore 7000t
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, references, title | GitHub Advisories | |
| aliases, published | EUVD, NVD | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-116411 is a high vulnerability (CVSS 8.8) in Dell Powerstore 1000t, published November 13, 2026. No source lists public exploit code. No source names a fixed version.