PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-28265 Dell CVE debrief

A low-privileged attacker with local access could potentially exploit the Path Traversal vulnerability in PowerStore, leading to modification of arbitrary system files. This vulnerability, tracked as CVE-2026-28265, affects PowerStore systems and requires immediate attention from system administrators and security teams. The vulnerability allows for potential disruption of system operations and highlights the need for local system file integrity checks and review of user access and permissions.

Vendor
Dell
Product
PowerStore
CVSS
MEDIUM 4.4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-01
Original CVE updated
2026-09-11
Advisory published
2026-04-01
Advisory updated
2026-09-11

Who should care

System administrators and security teams responsible for PowerStore systems should assess exposure and apply Dell's security update. They should also conduct local system file integrity checks and review user access and permissions to mitigate potential risks associated with this vulnerability. Additionally, they should consider the operational impacts of a potential exploit, including modification of arbitrarysystem

Why it matters

CVE-2026-28265 is a Path Traversal vulnerability in PowerStore that could allow a low-privileged local attacker to modify system files. System administrators and security teams should assess exposure, apply Dell's security update, and conduct local system file integrity checks.

  • Modification of arbitrary system files
  • Potential disruption of system operations
  • Need for local system file integrity checks
  • Review of user access and permissions

Technical summary

PowerStore contains a Path Traversal vulnerability in the Service user. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files. The vulnerability is considered to be of medium severity, with a CVSS score of 4.4. Dell has released a security update to address this vulnerability, and system administrators should review and apply the update as part of their security protocols.

Defensive priority

Medium priority for local system file integrity checks and user access review.

Recommended defensive actions

  • Review and apply Dell's security update for PowerStore
  • Conduct local system file integrity checks
  • Review user access and permissions

Evidence notes

The CVE record and NVD entry provide details on the Path Traversal vulnerability in PowerStore. Dell has released a security update for multiple vulnerabilities.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-28265 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-28265

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-28265 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-28265

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://www.dell.com/support/kbdoc/en-us/000444169/dsa-2026-157-dell-powerstore-t-security-update-for-multiple-vulnerabilities

    [email protected] - Vendor Advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.