CVE-2026-58574: CWE-306: Missing Authentication for Critical Function in Dell PowerStore 500T

CVE-2026-58574 is a missing authentication vulnerability (CWE-306) in Dell PowerStore 500T. It allows an unauthenticated attacker with network access to the restricted management interface to read internal system information from the appliance filesystem. The vulnerability is critical with a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network exploitable with no privileges or user interaction required, and impacts confidentiality, integrity, and availability at a high level. No official remediation or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation could expose sensitive system information and credentials, enabling an attacker to gain full administrative access to the Dell PowerStore 500T array. This compromises confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the management interface to trusted administrators only and monitor for unauthorized access attempts.