CVE-2025-26330 — Dell / PowerScale OneFS

CVE-2025-26330

Dell / PowerScale OneFS PUBLISHED

Description (CNA)

Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability to access the cluster with previous privileges of a disabled user account.

Affected (CNA)

Vendor / product	Versions
Dell / PowerScale OneFS	affected 9.4.0.0 through 9.10.0.1; affected 9.7.0.0 through 9.7.1.4

CWE

CWE-863

References

https://www.dell.com/support/kbdoc/en-us/000300860/dsa-2025-119-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.