DSA-2026-360: Security Update for Dell PowerScale OneFS Multiple Vulnerabilities

Sammendrag: Dell PowerScale OneFS remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Denne artikkelen gjelder for Denne artikkelen gjelder ikke for Denne artikkelen er ikke knyttet til noe bestemt produkt. Det er ikke produktversjonene som identifiseres i denne artikkelen.
Ta en titt på andre ressurser

Påvirkning

High

Detaljer

Third-party Component CVEs More information
FreeBSD ip6_multicast CVE-2026-49412 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD CVE-2026-4747 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD exec CVE-2026-7270 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD libnv CVE-2026-39457 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD dhclient CVE-2026-42512 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSH CVE-2026-35414 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD file CVE-2026-45251 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD libcasper CVE-2026-39461 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD capsicum CVE-2026-45259 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
FreeBSD th CVE-2026-45256 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
pyca/cryptography CVE-2026-34073 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
Python CVE-2026-3446 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
Apache HTTP Server CVE-2026-24072 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSH CVE-2026-35386, CVE-2026-35387, CVE-2026-35388 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.
OpenSSL CVE-2026-34180, CVE-2026-34181 https://nvd.nist.gov/search This hyperlink is taking you to a website outside of Dell Technologies.

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-70425 Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability. 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H  This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40635 Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering. 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-46460 Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized modification of system logs. 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N This hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2026-70425 Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability. 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H  This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-40635 Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering. 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L This hyperlink is taking you to a website outside of Dell Technologies.
CVE-2026-46460 Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized modification of system logs. 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N This hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies anbefaler at alle kunder tar hensyn til både grunnpoengsummen og alle relevante, midlertidige og miljømessige resultater som kan påvirke den potensielle alvorlighetsgraden knyttet til bestemte sikkerhetsproblemer.

Berørte produkter og utbedring

CVEs Addressed Product Affected Versions Remediated Versions Link
CVE-2026-35414, CVE-2026-46460 PowerScale OneFS Versions 9.5.0.0 through 9.7.1.15 Version 9.7.1.16 or later PowerScale OneFS Downloads Area
CVE-2026-4747 PowerScale OneFS Versions 9.5.0.0 through 9.10.1.7 Version 9.10.1.8 or later PowerScale OneFS Downloads Area
CVE-2026-35414 PowerScale OneFS Versions 9.8.0.0 through 9.10.1.7 Version 9.10.1.8 or later PowerScale OneFS Downloads Area
CVE-2026-4747, CVE-2026-35414 PowerScale OneFS Versions 9.11.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-3446, CVE-2026-7270, CVE-2026-24072, CVE-2026-34073, CVE-2026-34180, CVE-2026-34181, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-39457, CVE-2026-39461, CVE-2026-40635, CVE-2026-42512, CVE-2026-45251, CVE-2026-45256, CVE-2026-45259, CVE-2026-49412 PowerScale OneFS Versions 9.5.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-46460 PowerScale OneFS Versions 9.8.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-70425 PowerScale OneFS Versions 9.5.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-3446, CVE-2026-4747 PowerScale OneFS Version 9.14.0.0 Version 9.14.0.1 or later PowerScale OneFS Downloads Area
CVE-2026-7270, CVE-2026-24072, CVE-2026-34073, CVE-2026-34180, CVE-2026-34181, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-39457, CVE-2026-39461, CVE-2026-40635, CVE-2026-42512, CVE-2026-45251, CVE-2026-45256, CVE-2026-45259, CVE-2026-46460, CVE-2026-49412 PowerScale OneFS Versions 9.14.0.0 through 9.14.0.1 Version 9.15.0.0 or later PowerScale OneFS Downloads Area
CVE-2026-70425 PowerScale OneFS Versions 9.14.0.0 through 9.14.0.1 Version 9.15.0.0 or later PowerScale OneFS Downloads Area

 

CVEs Addressed Product Affected Versions Remediated Versions Link
CVE-2026-35414, CVE-2026-46460 PowerScale OneFS Versions 9.5.0.0 through 9.7.1.15 Version 9.7.1.16 or later PowerScale OneFS Downloads Area
CVE-2026-4747 PowerScale OneFS Versions 9.5.0.0 through 9.10.1.7 Version 9.10.1.8 or later PowerScale OneFS Downloads Area
CVE-2026-35414 PowerScale OneFS Versions 9.8.0.0 through 9.10.1.7 Version 9.10.1.8 or later PowerScale OneFS Downloads Area
CVE-2026-4747, CVE-2026-35414 PowerScale OneFS Versions 9.11.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-3446, CVE-2026-7270, CVE-2026-24072, CVE-2026-34073, CVE-2026-34180, CVE-2026-34181, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-39457, CVE-2026-39461, CVE-2026-40635, CVE-2026-42512, CVE-2026-45251, CVE-2026-45256, CVE-2026-45259, CVE-2026-49412 PowerScale OneFS Versions 9.5.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-46460 PowerScale OneFS Versions 9.8.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-70425 PowerScale OneFS Versions 9.5.0.0 through 9.13.1.0 Version 9.13.1.1 or later PowerScale OneFS Downloads Area
CVE-2026-3446, CVE-2026-4747 PowerScale OneFS Version 9.14.0.0 Version 9.14.0.1 or later PowerScale OneFS Downloads Area
CVE-2026-7270, CVE-2026-24072, CVE-2026-34073, CVE-2026-34180, CVE-2026-34181, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-39457, CVE-2026-39461, CVE-2026-40635, CVE-2026-42512, CVE-2026-45251, CVE-2026-45256, CVE-2026-45259, CVE-2026-46460, CVE-2026-49412 PowerScale OneFS Versions 9.14.0.0 through 9.14.0.1 Version 9.15.0.0 or later PowerScale OneFS Downloads Area
CVE-2026-70425 PowerScale OneFS Versions 9.14.0.0 through 9.14.0.1 Version 9.15.0.0 or later PowerScale OneFS Downloads Area

 

We encourage all customers to adopt the Long-Term Support (LTS) 2026 version which is the 9.13.1 code line, with the latest 9.13.1.x maintenance release.

For more information on LTS code lines, see Dell Infrastructure Solutions Group (ISG) LTS Release Support Customer Summary and Security Update Release Schedule for Supported Versions of Dell PowerScale OneFS.

Endringshistorikk

RevisionDateDescription
1.02026-09-03Initial Release
2.02026-09-03Adding Acknowledgements

Bekreftelser

CVE-2026-70425: Dell would like to thank WinD39 - Huynh Dinh Vu for reporting this issue. 

Relatert informasjon

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridisk ansvarsfraskrivelse

Berørte produkter

Isilon, PowerScale OneFS
Artikkelegenskaper
Artikkelnummer: 000505684
Artikkeltype: Dell Security Advisory
Sist endret: 03 sep. 2026
Få svar på spørsmålene dine fra andre Dell-brukere
Støttetjenester
Sjekk om enheten din er dekket av støttetjenestene.