CVE-2026-21423CWE-276

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability

Medium · published March 4, 2026

CVSS v3.1
6.7
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution, denial of service, elevation of privileges, and information disclosure.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.1th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2026-03-04T12:29Z
EPSS history
Timeline
  • 04 MAR 12:29Z
    Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability
    cvelistv5