CVE-2026-79687 is a critical (CVSS 9.0) missing authentication flaw in Dell PowerStore SDNAS. An unauthenticated attacker with remote access could reach the filesystem. It affects many PowerStore T and Q models. Apply the fixed PowerStore software named in Dell advisory DSA-2026-330.
What's affected
- Product: Dell PowerStore SDNAS (software defined NAS).
- Models in the record: PowerStore 500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T and 5200Q.
- Fixed: the PowerStore OS release in DSA-2026-330. Dell's page would not load for me, so I cannot state the version here.
- Weakness: CWE-306, missing authentication for critical function.
- CVSS 9.0 (critical), vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H. Not listed in CISA KEV.
How to check if you're exposed
Read the PowerStore OS version in PowerStore Manager and compare it with the fixed release in DSA-2026-330. Then find out whether you use the SDNAS file services, since that is the component named. If the NAS servers are not enabled, the exposure is smaller, but still follow Dell's guidance.
Check network reach. File service interfaces should only be reachable from the clients that need them.
Write down what you find, with the owner, version and network exposure of each instance. After you patch, check again and record the fixed version, so the next advisory starts from a current inventory. You can also paste a dependency manifest into the free scan at gold.safeguard.sh/scan for any packaged components that sit alongside this product.
What to do now
- Identify PowerStore arrays and their OS versions.
- Open DSA-2026-330 and note the fixed release for your model.
- Plan the upgrade with Dell guidance, and apply it.
- Restrict network access to NAS server interfaces to known client networks.
- Review file access logs for unfamiliar clients.
Why it matters
Missing authentication for a critical function means an action that should require a login does not. Dell says an unauthenticated remote attacker could get filesystem access. On a storage array that means the data itself.
Storage arrays are often outside normal patch cycles. Include them, since they hold the most valuable assets on the network.
Quick check
Which models are affected?
The record lists PowerStore 500T, 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T and 5200Q. Confirm in DSA-2026-330.
Sources
Last reviewed: 19 October 2026.
