CVE-2026-22278
HighSummary
Dell PowerScale OneFS versions prior to 9.13.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Risk Assessment
An attacker could perform brute-force attacks on authentication, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to update to version 9.13.0.0 or later and implement mechanisms to limit login attempts.
Other vulnerabilities in Dell PowerScale OneFS
See all- CVE-2026-40633High
A vulnerability in Dell PowerScale OneFS allows insertion of sensitive information into log files. A low-privileged attacker with local access could exploit this flaw to disclose confidential data.
- CVE-2026-49501Medium
A vulnerability in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2 is due to improper privilege management. It allows a local attacker with high privileges to escalate privileges.
- CVE-2026-27102Medium
Incorrect privilege assignment in Dell PowerScale OneFS versions 9.5.0.0-9.10.1.6 and 9.11.0.0-9.13.0.1 allows a low-privileged local attacker to escalate privileges.
- CVE-2026-24511Medium
A vulnerability in Dell PowerScale OneFS causes error messages to contain sensitive information. Versions 9.5.0.0 through 9.10.1.6 and 9.11.0.0 through 9.13.0.0 are affected.
Original NVD description (English source)
Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.