PT-2026-3778 · Dell · Dell Powerscale Onefs

Published 2026-01-15 · Updated 2026-01-22 · CVE-2026-22278

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions prior to 9.13.0.0

Description The issue resides in insufficient limitation of authentication attempts within the Dell PowerScale OneFS operating system. Successful exploitation could allow a remote attacker to gain unauthorized access to protected information.

Recommendations Update to version 9.13.0.0 or later.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2026-00647

CVE-2026-22278

Affected Products

Dell Powerscale Onefs

References · 7

• https://bdu.fstec.ru/vul/2026-00647 · Security Note
• https://dell.com/support/kbdoc/en-us/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22278 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22278 · Vendor Advisory
• https://dell.com/support/kbdoc/nl-nl/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · Note
• https://twitter.com/CVEnew/status/2014374737468678358 · Twitter Post
• https://twitter.com/TheHackerWire/status/2014394343424196760 · Twitter Post