CVE-2026-67262 is a missing authorization vulnerability in Dell PowerStore 500T. An attacker who has access to a mapped host can exploit this flaw to bypass per-initiator LUN access controls, allowing unauthorized read and write operations on LUNs. This vulnerability leads to a bypass of protection mechanisms designed to restrict access to storage resources. The CVSS 3.1 base score is 8.1, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to read from or write to LUNs without proper authorization, bypassing access controls. This can lead to unauthorized data disclosure, data modification, or data destruction on the affected storage system, severely impacting data security and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time.