CVE-2026-21422

Summary

Dell PowerScale OneFS, versions 9.10.0.0 through 9.13.1.0, contains an external control of system or configuration setting vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to protection mechanism bypass.

Affected Software

VendorProductVersion RangeStatus
DellPowerScale OneFS9.11.0.0 through 9.12.0.1 < 9.13.0.0 or lateraffected
DellPowerScale OneFS9.10.0.0 through 9.10.1.5 < 9.10.1.6 or lateraffected

Weaknesses

  • CWE-15: CWE-15: External Control of System or Configuration Setting

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References