Vulnerability Report

CVE-2026-49501

Title: Dell PowerScale OneFS Improper Privilege Management

Auth Bypass

Proof Of Concept

No public PoC currently indexed for CVE-2026-49501.

CWE Category CWE-269

Published Date Jul 15, 2026

Modified Date Jul 16, 2026

Exploit Status Not Found

Score 6.7 CVSS v3.1

Exploit Probability (EPSS)

0.10%

Vulnerability Summary

CVE-2026-49501: Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Impacted Vendors

dell 1

Reference Links

https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

CVSS v3.1

Source Entity [email protected]

Severity MEDIUM

6.7

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns