CVE-2026-22270 PUBLISHED

Assigner: dell
Reserved: 07.01.2026 Published: 04.03.2026 Updated: 04.03.2026

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 6.7

Product Status

Vendor Dell
Product PowerScale OneFS,
Versions Default: unaffected
  • affected from 9.11.0.0 through 9.12.0.1 to 9.13.0.0 or later (excl.)
  • affected from prior to 9.10.1.6 to 9.10.1.6 or later (excl.)

References

Problem Types

  • CWE-427: Uncontrolled Search Path Element CWE