Information Disclosure Vulnerability in Dell PowerScale OneFS
CVE-2026-40633

7.8HIGH

Key Information:

Vendor

Dell
Status
Powerscale Onefs
Vendor
CVE Published:
15 July 2026

What is CVE-2026-40633?

A security issue exists in Dell PowerScale OneFS that allows low privileged attackers with local access to insert sensitive information into log files. This vulnerability might lead to unauthorized information disclosure, posing a risk to the confidentiality of the data stored in the system.

Affected Version(s)

PowerScale OneFS 0 < 9.10.1.8 or later

PowerScale OneFS 0 < 9.13.1.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000483600/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.