CVE-2026-40633
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in Dell PowerScale OneFS allows insertion of sensitive information into log files. A low-privileged attacker with local access could exploit this flaw to disclose confidential data.
Risk Assessment
The risk involves potential leakage of sensitive information such as passwords or keys, which could enable further attacks on the infrastructure.
Recommendation
It is recommended to immediately update Dell PowerScale OneFS to a patched version and restrict local access to the system.
Other vulnerabilities in Dell PowerScale OneFS
See all- CVE-2026-22278High
Dell PowerScale OneFS versions prior to 9.13.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
- CVE-2026-49501Medium
A vulnerability in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2 is due to improper privilege management. It allows a local attacker with high privileges to escalate privileges.
- CVE-2026-27102Medium
Incorrect privilege assignment in Dell PowerScale OneFS versions 9.5.0.0-9.10.1.6 and 9.11.0.0-9.13.0.1 allows a low-privileged local attacker to escalate privileges.
- CVE-2026-24511Medium
A vulnerability in Dell PowerScale OneFS causes error messages to contain sensitive information. Versions 9.5.0.0 through 9.10.1.6 and 9.11.0.0 through 9.13.0.0 are affected.
Original NVD description (English source)
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.