PT-2026-3777 · Dell · Dell Powerscale Onefs

Published 2026-01-15 · Updated 2026-01-23 · CVE-2026-22281

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.5 Dell PowerScale OneFS versions 9.6.0.0 through 9.7.1.10 Dell PowerScale OneFS versions 9.8.0.0 through 9.10.1.3 Dell PowerScale OneFS versions prior to 9.13.0.0

Description Dell PowerScale OneFS contains a Time-of-check Time-of-use (TOCTOU) race condition. An attacker with adjacent network access and low privileges could potentially exploit this issue, resulting in a denial of service. The vulnerability is related to synchronization errors when using a shared resource.

Recommendations Update Dell PowerScale OneFS versions 9.5.x to a version later than 9.5.1.5. Update Dell PowerScale OneFS versions 9.6.x and 9.7.x to a version later than 9.7.1.10. Update Dell PowerScale OneFS versions 9.8.x and 9.10.x to a version later than 9.10.1.3. Update Dell PowerScale OneFS versions 9.11.x and 9.12.x to version 9.13.0.0 or later.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2026-00646

CVE-2026-22281

Affected Products

Dell Powerscale Onefs

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-22281 · Security Note
• https://dell.com/support/kbdoc/en-us/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00646 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22281 · Vendor Advisory
• https://dell.com/support/kbdoc/nl-nl/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · Note
• https://twitter.com/CVEnew/status/2014577023621210418 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2014443173913797028 · Twitter Post