Every CVESearch/Get API key

CVE-2026-86356

Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of...

8.8 High

Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

What each source reports

CVE List Score used8.8

Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator.

Record
CVE-2026-86356
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-13
EUVDEUVD-2026-1252788.8

Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator.

Record
EUVD-2026-125278
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-13
GitHub AdvisoriesGHSA-hvrq-8g53-hgg68.8

Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of...

Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator.

Record
GHSA-hvrq-8g53-hgg6
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-13
NVD8.8

Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to administrator.

Record
CVE-2026-86356
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-13

Affected products

Show 3 moreShow less

History

History
RecordedChangedSources
aliases, references, titleGitHub Advisories, NVD
productsEUVD
aliases, products, publishedEUVD
first indexedCVE List

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-86356 is a high vulnerability (CVSS 8.8) in Dell Powerstore 1000t, published November 13, 2026. No source lists public exploit code. No source names a fixed version.

References

MoveEnter Open