Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

A critical Missing Authentication for Critical Function vulnerability (CVE-2026-58574) has been identified in Dell PowerStore storage appliances. An unauthenticated attacker with network access to the restricted management interface can exploit this flaw to read internal system information from the appliance filesystem. The vulnerability is rated Critical due to its potential to expose sensitive information and credentials, ultimately enabling full administrative access to the storage array. No authentication is required to exploit this vulnerability, making it particularly dangerous in environments where the management interface is accessible over a network. Dell has released a security advisory (DSA-2026-330) addressing this and multiple other vulnerabilities in Dell PowerStore T.