CVEvulnerability

CVE-2026-22280

5.5 MEDIUM Published 2026-01-22 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2026-01-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-732

Description

Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains an incorrect permission assignment for critical resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service.

Affected configurations

• dell powerscale onefs (>= 9.5.0.0 < 9.5.1.6) • dell powerscale onefs (>= 9.6.0.0 < 9.7.1.11) • dell powerscale onefs (>= 9.8.0.0 < 9.10.1.4) • dell powerscale onefs (>= 9.11.0.0 < 9.13.0.0)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References