CVE-2026-22281
published 2026-01-22CVE-2026-22281: Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0…
PriorityP420medium4.8CVSS 3.1
AVAACHPRLUINSUCNINAH
EPSS
0.16%
5.8th percentile
Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to denial of service.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dell | powerscale_onefs | >= 9.11.0.0 < 9.13.0.0 | 9.13.0.0 |
| dell | powerscale_onefs | >= 9.5.0.0 < 9.5.1.6 | 9.5.1.6 |
| dell | powerscale_onefs | >= 9.6.0.0 < 9.7.1.11 | 9.7.1.11 |
| dell | powerscale_onefs | >= 9.8.0.0 < 9.10.1.4 | 9.10.1.4 |
| dell | powerscale_onefs | >= N/A < 9.13.0.0 | 9.13.0.0 |
| dell | powerscale_onefs | >= N/A < 9.5.1.6 | 9.5.1.6 |
| dell | powerscale_onefs | >= N/A < 9.7.1.11 | 9.7.1.11 |
| dell | powerscale_onefs | >= N/A < 9.10.1.4 | 9.10.1.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-01-22
Published