Incorrect Authorization Vulnerability in Dell PowerScale OneFS
CVE-2026-46460

3.5LOW

Key Information:

Vendor

Dell
Status
Powerscale Onefs
Vendor
CVE Published:
9 September 2026

What is CVE-2026-46460?

The vulnerability present in Dell PowerScale OneFS affects multiple software versions and allows an adjacent network attacker with low privileges to exploit the system. This exploitation could result in unauthorized changes to system logs, potentially compromising the integrity and security of the system. It is crucial for users of affected versions to apply the necessary updates to mitigate this risk.

Affected Version(s)

PowerScale OneFS 0 < 9.7.1.16 or later

PowerScale OneFS 0 < 9.13.1.1 or later

PowerScale OneFS 0 < 9.15.0.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000505684/dsa-20...
vendor-advisory

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.