Dell Expands PowerStore Advisory with Two Additional Critical Vulnerabilities
Dell has updated its security advisory for the Dell PowerStore storage platform, expanding the list of addressed vulnerabilities and confirming the availability of additional firmware updates.
The original advisory, published on August 10, 2026, covered multiple issues in PowerStoreT OS rated as Critical. Subsequent revisions on August 27 and August 31 added new details about affected versions and two previously undisclosed vulnerabilities.
The August 27 update introduced patches for PowerStoreT OS versions 4.3.1.2-2771239 and 4.1.0.6-2771237 in addition to the previously listed 5.0.0.2-2761110 build. The August 31 revision added CVE-2026-58566 and CVE-2026-79687 to the remediation list, confirming that both issues are resolved by the updates released earlier in the month.
CVE-2026-79687 affects Dell PowerStore SDNAS and stems from missing authentication in a critical component, potentially allowing remote attackers to access the file system without credentials. CVE-2026-58566 is described as an authorization bypass vulnerability that can result in privilege escalation. The two flaws received CVSSv3.1 base scores of 9.0 and 8.8 respectively.
The full list of vulnerabilities referenced in the advisory includes: CVE-2026-58566, CVE-2026-58567, CVE-2026-58569, CVE-2026-58571, CVE-2026-58572, CVE-2026-58574, CVE-2026-58575, CVE-2026-67262, CVE-2026-67271, CVE-2026-70415, CVE-2026-76111, CVE-2026-79682, CVE-2026-79683, CVE-2026-79684, CVE-2026-79685, CVE-2026-79686, and CVE-2026-79687.
Related articles
Cache Key Injection Flaw in Nginx Configurations Allows Access Bypass, Data Disclosure and Cached Denial of Service
Security researcher Alex Brumen from YesWeHack has detailed a Cache Key Injection attack vector that exploits poorly constructed cache keys in Nginx. The issue arises when administrators concatenate variable-length values without delimiters, such as $scheme$host$request_uri$http_accept, allowing different requests to produce identical cache keys. Attackers can poison the cache with 404 responses to deliver CPDoS, expose restricted pages like /admin by manipulating path components, or even achieve stored XSS by colliding HTTP and HTTPS responses. The technique can also bypass Cloudflare protection when the Authorization header routes requests directly to the vulnerable Nginx cache. Mitigation requires using explicit delimiters or structured encoding in cache keys, validating the Host header, enforcing HTTPS redirects, and avoiding caching of authenticated requests.
Click2Shell Flaw in WordPress Core Enables Remote Code Execution via Single Malicious Link
Researchers at pwn.ai have disclosed Click2Shell, a vulnerability in the WordPress core that allows an attacker to install a malicious theme and achieve remote code execution simply by tricking an authenticated administrator into opening a crafted link. The isolated flaw carries a CVSS score of 7.1, but the full attack chain reaches 9.6. The issue stems from an interpretation mismatch between the WordPress.org theme directory and the administrator browser, causing the browser to automatically trigger the install button without any user confirmation or password prompt. Affected versions start from 6.0 and run up to but not including 7.1.1. The vulnerability has been fixed in WordPress 7.1.1 with backported patches released for all supported branches down to version 4.7. No exploitation in the wild had been observed at the time of disclosure, yet the low barrier of convincing an admin to click a link makes prompt patching essential.
CISA Adds Three Actively Exploited Linux Kernel Vulnerabilities to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency has added three vulnerabilities affecting the Linux Kernel to its Known Exploited Vulnerabilities catalog. The flaws, identified as CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964, are confirmed to be under active exploitation in the wild. CISA is directing all federal agencies to apply patches immediately and to search for indicators of compromise. The vulnerabilities impact the kernel's kTLS TLS processing, the ebtables network bridge component, and the AF_ALG cryptographic interface. Each issue can lead to memory corruption or inconsistent internal state that attackers may leverage for privilege escalation or remote code execution.
Keycloak Cluster on Three VMs: Engineers Detail Embedded Infinispan Setup, HA Testing Failures, and Bug Fix
A team deployed Keycloak for 25,000–30,000 users across a country using three isolated VMs instead of Kubernetes. They chose Embedded Infinispan with JGroups over an external cluster to reduce failure points and maintain session replication. PostgreSQL with Patroni handled shared storage and JDBC_PING discovery. Testing revealed that full datacenter outages triggered split-brain conditions and 5xx errors that the built-in healthcheck could not resolve. The engineers wrote a Python watcher script to detect multiple coordinators in the JGROUPS_PING table and restart affected containers. They reported the recovery bug to the Keycloak project, which was confirmed and fixed in a later release. The production cluster now survives single-DC loss without session loss.