CVE-2026-79683

Dell PowerStore contains a Protection Mechanism Failure (CWE-693) in which the array fails to constrain where authenticated users may write files. An authenticated user with limited privileges can trigger the flaw over the network, without user interaction, by writing content through a path that is not properly validated. Successful exploitation lets the attacker place attacker-controlled content at arbitrary filesystem paths, and the CVSS scoring (high confidentiality, integrity, and availability impact) indicates this could tamper with critical system files and meaningfully disrupt or compromise the appliance. Organizations running Dell PowerStore storage arrays are affected; the specific affected and fixed version ranges are not included in the data available here and must be taken from Dell's security advisory. There is no known exploitation: no public proof-of-concept exists, the flaw is not in CISA KEV, and EPSS estimates only a 0.3% chance of exploitation within 30 days.

What to do: Check Dell's security advisory for CVE-2026-79683 and upgrade PowerStore to the fixed release it specifies, since affected version ranges are not included in the data available here. Until patched, restrict PowerStore Manager (UI/API) access to trusted management networks and review which low-privilege accounts hold authenticated access. No public PoC or in-the-wild exploitation is known, so applying the vendor fix and monitoring Dell's guidance should be sufficient for most defenders.