CVE-2026-79682

CVE-2026-79682 is a command injection flaw (CWE-77) in Dell PowerStore, Dell's enterprise midrange all-flash storage array line. An authenticated user with limited (low) privileges can trigger the flaw, which allows execution of arbitrary operating system commands with root privileges on the appliance. Because the vector is local (CVSS 3.1 AV:L) but scope is changed, a successful attacker gains full control of the affected PowerStore system, including complete confidentiality, integrity and availability impact, effectively a privilege escalation from a restricted account to root. Organizations operating Dell PowerStore arrays — typically enterprise and mid-market data centers — are the affected population, though exploitation requires credentials for a low-privilege account on the appliance. As of now there is no public proof-of-concept, the flaw is not in the CISA KEV catalog, and EPSS gives it a 0.5% probability of exploitation in the next 30 days, so no active exploitation is known.

What to do: Apply the PowerStore OS update identified in Dell's security advisory for this CVE — check the advisory for your specific model's affected and fixed releases rather than assuming from this data. Until patched, limit and audit accounts holding low-privilege roles on PowerStore management interfaces and review logs for unexpected command execution or administrative activity. No public PoC or in-the-wild exploitation is known, so prioritize patching within normal maintenance windows but verify against Dell's guidance for completeness.