CVE-2026-22278CWE-307

Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability

High · published January 22, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

🚨 An unauthenticated attacker could exploit this high-risk vulnerability with remote access — like a burglar with an unlimited number of tries at your front door! 🔑 Imagine a delivery driver attempting to drop off packages without ever having to show ID at the gate. The server keeps letting them in to try again and again, eventually allowing access to everything inside. If this vulnerability is exploited, an attacker could gain unauthorized access to sensitive data or even critical systems, putting your organization at significant risk. This could lead to data breaches or unauthorized modifications, potentially causing chaos in your network!

Put simply

Imagine a delivery driver attempting to drop off packages without ever having to show ID at the gate. The server keeps letting them in to try again and again, eventually allowing access to everything inside. Dell PowerScale OneFS versions prior to 9.13.0.0 have a flaw that allows excessive authentication attempts without proper restrictions. This makes it possible for an attacker to brute-force their way in without the server catching on.

What to do

If this vulnerability is exploited, an attacker could gain unauthorized access to sensitive data or even critical systems, putting your organization at significant risk. This could lead to data breaches or unauthorized modifications, potentially causing chaos in your network! Immediately update your OneFS version to 9.13.0.0 or later to close this vulnerability. It's essential to monitor access logs for any suspicious activity and implement additional security measures like rate limiting on authentication attempts. You've got this! With a quick update, you can shore up your defenses and keep your data safe. 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2026-01-22T16:16Z
EPSS history
Timeline
  • 22 JAN 16:16Z
    Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability
    cvelistv5