CVE-2026-22281

Published: Jan 22, 2026Modified: Jun 17, 2026

4.8

Vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to denial of service.

Affected (4)

Products: Dell: Powerscale Onefs

Dell

1 product

Powerscale Onefs

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Powerscale Onefs	From 9.11.0.0 to 9.13.0.0
Dell Powerscale Onefs	From 9.5.0.0 to 9.5.1.6
Dell Powerscale Onefs	From 9.6.0.0 to 9.7.1.11
Dell Powerscale Onefs	From 9.8.0.0 to 9.10.1.4

Related CWEs

CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (1)

https://www.dell.com/support/kbdoc/en-us/000415586/dsa-2026-049-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.