CVE-2026-21424

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-250

Affected software

Vendor	Product	Versions
Dell	PowerScale OneFS	>= prior to 9.10.1.6, < 9.10.1.6 or later; >= 9.11.0.0 through 9.12.0.1, < 9.13.0.0 or later

References

https://www.dell.com/support/kbdoc/en-sg/000432452/dsa-2026-038-security-update-for-dell-powerscale-onefs-multiple-vulnerabilitiesVendor Advisory

Timeline

Published: Mar 4, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-214257.8Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect privilege assignment vulnera CVE-2026-214266.7Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges CVE-2026-214278.5The installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which may lead to insecurely CVE-2026-214287.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the ``write_headers`` function do CVE-2026-214294.3Emlog is an open source website building system. In version 2.5.23, the admin can set controls which makes users unable to edit or delete th CVE-2026-21437.2A security vulnerability has been detected in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/set_ddn CVE-2026-214309.3Emlog is an open source website building system. In version 2.5.23, article creation functionality is vulnerable to cross-site request forge CVE-2026-214315.4Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability in the `Resource media libra CVE-2026-214325.4Emlog is an open source website building system. Version 2.5.23 has a stored cross-site scripting vulnerability that can lead to account tak CVE-2026-214337.7Emlog is an open source website building system. Versions up to and including 2.5.19 are vulnerable to server-side Out-of-Band (OOB) request CVE-2026-214347.5webtransport-go is an implementation of the WebTransport protocol. From 0.3.0 to 0.9.0, an attacker can cause excessive memory consumption i CVE-2026-214357.5webtransport-go is an implementation of the WebTransport protocol. Prior to v0.10.0, an attacker can cause a denial of service in webtranspo