External risk intelligence

Dell PowerStore Missing Authentication Information Disclosure Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2026-58574

The vulnerability affects a restricted management interface of a storage appliance. While reachable over a network, such interfaces are typically deployed within internal, segmented management networks and are not intended to be exposed directly to the public internet in standard deployment patterns.

Missing Authentication

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This advisory addresses a critical vulnerability in Dell PowerStore systems related to missing authentication on a restricted management interface. An attacker could potentially leverage this flaw to access sensitive internal system information and credentials, which might grant administrative control over the storage array. The main concern is confirming the relevance and potential exposure of these systems within your environment.

Unauthenticated access to sensitive storage data.
Confirms critical security oversight in storage systems.
Assess potential exposure of storage array data.

Attack Path

How an attacker could exploit the issue

An attacker with network access could target the restricted management interface of Dell PowerStore appliances. By exploiting a missing authentication check, they could read sensitive internal system files, potentially exposing credentials and granting full administrative control over the storage array.

Unauthenticated network access required.
Access restricted management interface.
Risk of information exposure and full control.

Live Threat

Current exploitation, exposure, and threat context

A missing authentication vulnerability in Dell PowerStore could allow an unauthenticated attacker with network access to the restricted management interface to read sensitive internal system information, including credentials, from the appliance's filesystem. This could lead to full administrative access to the storage array.

Appliance filesystem data.
Network access to management interface.
Full administrative control of the array.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability in Dell PowerStore's restricted management interface likely impacts infrastructure and security teams responsible for storage systems. The immediate priority is to identify all PowerStore appliances, determine their network reachability, and confirm their criticality to business operations. Once identified, the accountable owner for each affected system should be engaged to plan a risk-based remediation strategy.

Ownership: Infrastructure and security teams.
Verify first: Appliance network exposure and criticality.
Action: Plan risk-based remediation.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is Dell PowerStore?

Dell PowerStore is a line of enterprise-grade data storage appliances. These systems are designed to store, manage, and protect high volumes of business-critical information, often serving as the foundation for server environments and large databases that require robust performance and centralized administration.

What does Missing Authentication for Critical Function mean for CVE-2026-58574?

This weakness, categorized as CWE-306, means the appliance fails to verify who is requesting access before performing a sensitive operation. In the context of this CVE, it allows an unauthenticated user to bypass standard security checks and interact with protected system components that should only be accessible to authorized administrators.

How does an attacker trigger this vulnerability?

An attacker triggers this by sending requests over the network directly to the appliance's restricted management interface. Crucially, this bug cannot be triggered by standard data operations or through client-side interfaces; it requires direct network reachability to the specific backend management port intended for administrative use.

Do I need to worry if my Dell PowerStore is on an internal network?

According to Halo Surface Signal, this vulnerability is unlikely to be reachable if your management interface is properly isolated within a segmented, non-public network. Because the interface is not intended to be exposed to the public internet, internal appliances face a much lower risk, though you should still confirm your local network segmentation is strictly enforced.

When should I prioritize responding to this advisory?

You should prioritize this immediately if any management interfaces are reachable outside of your secure, private management subnet. Start by identifying all PowerStore assets in your inventory, verifying their current network placement, and coordinating with your infrastructure team to ensure that only authorized traffic can reach the management interface.

References

www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-power…

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.