CVE-2026-32803

Published: May 8, 2026Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.8 / Impact: 1.4

Source: security_alert@emc.com (Secondary)

Description

Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Affected (4)

Products: Dell: Powerscale Onefs

Dell

1 product

Powerscale Onefs

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Powerscale Onefs	From 9.11.0.0 to 9.13.0.0
Dell Powerscale Onefs	From 9.5.0.0 to 9.5.1.7
Dell Powerscale Onefs	From 9.6.0.0 to 9.7.1.14
Dell Powerscale Onefs	From 9.8.0.0 to 9.10.1.6

Related CWEs

CWE-778

Insufficient Logging

When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it.

References (1)

https://www.dell.com/support/kbdoc/en-us/000461228/dsa-2026-172-security-update-for-dell-powerscale-onefs-insufficient-logging-vulnerability

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.