CVE-2026-58569: CWE-829: Inclusion of Functionality from Untrusted Control Sphere in Dell PowerStore 500T

CVE-2026-58569 is a vulnerability in Dell PowerStore 500T where functionality from an untrusted control sphere can be included, allowing an authenticated user with limited privileges to execute arbitrary code with root privileges. This vulnerability impacts the system's security by enabling privilege escalation and full system compromise. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation allows an authenticated user with limited privileges to execute arbitrary code as root, leading to complete system compromise including full control over confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users only and monitor for suspicious activity related to privilege escalation attempts.