Insecure Temporary File Vulnerability in Dell PowerScale OneFS Products
CVE-2026-40635

5.4MEDIUM

Key Information:

Vendor

Dell
Status
Powerscale Onefs
Vendor
CVE Published:
9 September 2026

What is CVE-2026-40635?

The Dell PowerScale OneFS versions from 9.12.0.0 to 9.13.1.0 contain a vulnerability related to insecure temporary file handling. This weakness enables low privileged remote attackers to manipulate temporary files, which could lead to potential denial of service conditions and the possibility of information tampering. It is essential for users to review and implement the relevant security updates and advisories provided by Dell to mitigate this risk.

Affected Version(s)

PowerScale OneFS 0 < 9.13.1.1 or later

PowerScale OneFS 0 < 9.15.0.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000505684/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.