PT-2026-22904 · Dell · Dell Powerscale Onefs

Publicado 2026-03-04 · Atualizado 2026-03-04 · CVE-2026-21425

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions prior to 9.10.1.6 Dell PowerScale OneFS versions 9.11.0.0 through 9.12.0.1

Description Dell PowerScale OneFS contains an incorrect privilege assignment issue. A local attacker with low privileges could potentially exploit this, leading to elevation of privileges.

Recommendations Update Dell PowerScale OneFS to version 9.10.1.6 or later. Update Dell PowerScale OneFS to a version later than 9.12.0.1.

Correção

LPE

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2026-21425

Produtos afetados

Dell Powerscale Onefs

Referências · 8

• https://dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · Aviso do Fabricante
• https://t.me/cveNotify/154105 · Publicação no Telegram
• https://t.me/CVEtracker/46316 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2029191349602533664 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2029192991508771115 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-21425 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21425 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2029208361879666723 · Publicação no Twitter