# CVE-2026-58566: Dell PowerStore incorrect authorization leading to privilege escalation

Source: https://junglewise.ai/threats/cve-2026-58566-dell-powerstore-incorrect-authorization-leading-to-privilege  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-01. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-58566 · Severity: high · CVSS 8.8 · Published 2026-09-01

Dell PowerStore is a enterprise storage appliance used to manage and protect critical business data. A low-privileged attacker with network access to the management interface could exploit an authorization flaw to invoke administrator-only operations and gain full control over the storage system, potentially leading to unauthorized data access, modification, or deletion.

Technologies: [Dell PowerStore](https://junglewise.ai/threats/technologies/powerstore). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-58566 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-58566 being exploited in the wild.

**How severe is CVE-2026-58566?** High severity, with a CVSS score of 8.8, published 1 September 2026.

**Which products and versions are affected?** Dell PowerStore.

**Is there a fix for CVE-2026-58566?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-58566 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-58566?** Check whether you run Dell PowerStore. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is an incorrect authorization flaw in Dell PowerStore that allows authenticated users with low privileges to invoke administrator-only operations without proper authorization checks. The attack vector is network-based and requires prior authentication but no additional user interaction. By exploiting this weakness, an attacker can escalate their privileges from a low-privilege account to administrative level, gaining full control over the storage appliance. A security patch is available through Dell's security advisory DSA-2026-330.

## Affected products

- Dell PowerStore

## Timeline

- 2026-09-01: disclosed

## References

- [https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities](https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities)

## Related threats

- [Dell PowerStore command injection privilege escalation](https://junglewise.ai/threats/cve-2026-79682-dell-powerstore-command-injection-privilege-escalation)
- [Dell PowerStore OS command injection](https://junglewise.ai/threats/cve-2026-58567-dell-powerstore-os-command-injection)
- [Dell PowerStore privilege escalation in Protection Mechanism](https://junglewise.ai/threats/cve-2026-79686-dell-powerstore-privilege-escalation-in-protection-mechanism)
- [Dell PowerStore argument injection in management interface](https://junglewise.ai/threats/cve-2026-79685-dell-powerstore-argument-injection-in-management-interface)
- [Dell PowerStore privilege escalation via untrusted functionality inclusion](https://junglewise.ai/threats/cve-2026-58569-dell-powerstore-privilege-escalation-via-untrusted-functionality)