CVE-2026-79685: CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in Dell PowerStore 500T

Dell PowerStore 500T contains an argument injection vulnerability (CWE-88) where improper neutralization of argument delimiters in commands could be exploited by an authenticated user with limited privileges. This flaw could allow unauthorized access to sensitive system information. The vulnerability has been assigned CVE-2026-79685 and carries a CVSS 3.1 base score of 6.5, indicating a medium severity impact primarily affecting confidentiality. No known exploits in the wild have been reported, and no vendor-provided patch or remediation level is currently documented.

An authenticated user with limited privileges could exploit this vulnerability to gain unauthorized access to sensitive system information. The impact is limited to confidentiality and does not affect integrity or availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Dell's advisories for updates. No vendor guidance indicating no action required or mitigation is currently available.