PT-2026-22904 · Dell · Dell Powerscale Onefs

Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-21425

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions prior to 9.10.1.6 Dell PowerScale OneFS versions 9.11.0.0 through 9.12.0.1

Description Dell PowerScale OneFS contains an incorrect privilege assignment issue. A local attacker with low privileges could potentially exploit this, leading to elevation of privileges.

Recommendations Update Dell PowerScale OneFS to version 9.10.1.6 or later. Update Dell PowerScale OneFS to a version later than 9.12.0.1.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-21425

Affected Products

Dell Powerscale Onefs

References · 8

• https://dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-21425 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21425 · Security Note
• https://t.me/cveNotify/154105 · Telegram Post
• https://t.me/CVEtracker/46316 · Telegram Post
• https://twitter.com/CVEnew/status/2029191349602533664 · Twitter Post
• https://twitter.com/infoflowcloud/status/2029192991508771115 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2029208361879666723 · Twitter Post