ZeroDay Findings
Sign inSign up

Findings

CVE-2026-28265

PowerStore, contains a Path Traversal vulnerability in the Service user.

Published Apr 1, 2026 · updated Sep 11, 2026 · dell powerstoreos

PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 1, 2026 · NIST NVD

    Detected

    PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

  2. Sep 11, 2026 · NIST NVD

    Updated

    PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

Affected

  • cpe dell/powerstoreosversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-28265

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-28265

    PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

    nvd.nist.gov

References