CVE-2025-26480

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.0, contains an uncontrolled resource consumption vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Apr 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-264817.5Dell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource consumption vulnerability. A remote unprivileged CVE-2025-264824.9Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with CVE-2025-264838.2Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exp CVE-2025-264844.9Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileg CVE-2025-264855.8A vulnerability in Beta80 Life 1st enables the retrieval of different error messages for failed authentication attempts (in case of the usa CVE-2025-264866.0Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash, Use of a One-Way H CVE-2025-264878.6Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other netw CVE-2025-264887.5Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of th CVE-2025-264896.5Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the ap CVE-2025-26499.8A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown CVE-2025-264929.1In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources CVE-2025-264936.1In JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection Report tab