MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2026-22279

CVSS 4.3v3.1pub. 2026-01-22upd. 2026-01-28

Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information tampering.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

  • Dell Powerscale Onefs

    APP
    Dell
    < 9.13.0.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2024-53298CRITICAL9.8PL ✓same product

Brak autoryzacji w NFS export — Dell PowerScale OneFS (Auth Bypass)

CVE-2025-27690CRITICAL9.8PL ✓same product

Dell PowerScale OneFS — przejęcie konta przez domyślne hasło

CVE-2022-31229CRITICAL9.6PL ✓same product

Dell PowerScale OneFS — ujawnienie wrażliwych danych w komunikatach błędów

CVE-2026-40633HIGH7.8PL ✓same product

Dell PowerScale OneFS — ujawnienie danych przez zapis w plikach logów

CVE-2026-22278HIGH8.1same product

Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication ...