CVE-2026-70425: Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection…

PriorityP335medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.53%

44.3th percentile

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
dell	powerscale_onefs	< 9.13.1.1 or later	9.13.1.1 or later
dell	powerscale_onefs	< 9.15.0.0 or later	9.15.0.0 or later
dell	powerscale_onefs	9.11.0.0 – 9.14.0.1	—
dell	powerscale_onefs	9.5.0.0 – 9.7.1.0	—
dell	powerscale_onefs	9.8.0.0 – 9.10.1.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.