cbcvebase.
CVE-2026-22281
published 2026-01-22

CVE-2026-22281: Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0…

PriorityP420medium4.8CVSS 3.1
AVAACHPRLUINSUCNINAH
EPSS
0.16%
5.8th percentile
Dell PowerScale OneFS, versions 9.5.0.0 through 9.5.1.5, versions 9.6.0.0 through 9.7.1.10, versions 9.8.0.0 through 9.10.1.3, versions starting from 9.11.0.0 and prior to 9.13.0.0, contains a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to denial of service.

Affected

8 ranges
VendorProductVersion rangeFixed in
dellpowerscale_onefs>= 9.11.0.0 < 9.13.0.09.13.0.0
dellpowerscale_onefs>= 9.5.0.0 < 9.5.1.69.5.1.6
dellpowerscale_onefs>= 9.6.0.0 < 9.7.1.119.7.1.11
dellpowerscale_onefs>= 9.8.0.0 < 9.10.1.49.10.1.4
dellpowerscale_onefs>= N/A < 9.13.0.09.13.0.0
dellpowerscale_onefs>= N/A < 9.5.1.69.5.1.6
dellpowerscale_onefs>= N/A < 9.7.1.119.7.1.11
dellpowerscale_onefs>= N/A < 9.10.1.49.10.1.4
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.