CVE-2026-70425

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability.

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - security_alert@emc.com

Published

2026-09-09

Last modified

2026-09-11

Weaknesses

CWE-78

Affected products

• Powerscale Onefs (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000505684/dsa-2026-360-security-update-for-dell-powerscale-onefs-multiple-vuln…