Is CVE-2026-79684 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-79684 being exploited in the wild.

How severe is CVE-2026-79684?

High severity, with a CVSS score of 8.8, published 1 September 2026.

Is there a fix for CVE-2026-79684?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-79684 attacked?

It is attacked over the network.

Am I affected by CVE-2026-79684?

Check whether you run Dell PowerStore at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-79684: Dell PowerStore privilege escalation via protection mechanism bypass

CVE-2026-79684 · Severity: high · CVSS 8.8 · Published 2026-09-01

Dell PowerStore is an enterprise storage array used to store and manage critical business data. CVE-2026-79684 allows an authenticated user with basic access to bypass security controls and gain administrative privileges, potentially enabling full control over the storage system, data theft, or denial of service. An attacker with even minimal legitimate access could escalate to administrative access without requiring additional credentials.

Technologies: Dell PowerStore. Vendors: Dell.

Quick answers

Is CVE-2026-79684 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-79684 being exploited in the wild.
How severe is CVE-2026-79684?: High severity, with a CVSS score of 8.8, published 1 September 2026.
Which products and versions are affected?: Dell PowerStore <UNKNOWN>.
Is there a fix for CVE-2026-79684?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-79684 attacked?: It is attacked over the network.
Am I affected by CVE-2026-79684?: Check whether you run Dell PowerStore at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

CVE-2026-79684 is a Protection Mechanism Failure vulnerability in Dell PowerStore that allows authenticated users with limited privileges to bypass access restrictions and escalate to elevated privileges. The vulnerability is accessible over the network without user interaction, requiring only valid authentication credentials at a limited privilege level (CVSS vector: AV:N/AC:L/PR:L/UI:N). An authenticated attacker can exploit this flaw to gain administrative access and perform unauthorized operations including data manipulation, code execution, or system compromise. A patch or security update from Dell is expected to address this and related vulnerabilities disclosed in DSA-2026-330.

Affected products

Dell PowerStore <UNKNOWN>

Timeline

2026-09-01: disclosed

References

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.