CVE-2026-76111: CWE-863: Incorrect Authorization in Dell PowerStore 500T

Dell PowerStore 500T contains a CWE-863 incorrect authorization vulnerability identified as CVE-2026-76111. An attacker with low-level authenticated access could exploit this flaw to invoke operations reserved for administrators, resulting in privilege escalation. The vulnerability is rated high severity with a CVSS 3.1 score of 8.8, indicating network attack vector, low attack complexity, privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation allows a low-privileged authenticated attacker to escalate privileges by invoking administrator-only operations. This could lead to full system compromise, including unauthorized access to sensitive data and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Dell PowerStore 500T management interfaces to trusted users only and monitor for suspicious activity from low-privileged accounts.