CVE-2026-67271 is an out-of-bounds write vulnerability in the SMB/CIFS component of Dell PowerStore 500T. This vulnerability allows an unauthenticated remote attacker to send a specially crafted SMB packet that can cause the system to crash persistently if automatic restarts are enabled. Furthermore, the flaw may be leveraged for remote code execution, making it a critical security issue. The CVSS v3.1 base score is 9.8 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

An unauthenticated remote attacker can exploit this vulnerability to cause a denial of service by crashing the Dell PowerStore 500T system, potentially persistently if automatic restarts are enabled. Additionally, the attacker may achieve remote code execution, compromising system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict network access to SMB services on affected devices to trusted users only, and monitor for unusual SMB traffic patterns.