Dell PowerScale OneFS PrivEsc (pre-9.10.1.6, 9.11.0.0-9.12.0.1)
CVE-2026-21421 Published on March 4, 2026
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Vulnerability Analysis
CVE-2026-21421 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Execution with Unnecessary Privileges
The software performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Products Associated with CVE-2026-21421
Want to know whenever a new CVE is published for Dell Powerscale Onefs? stack.watch will email you.
Affected Versions
Dell PowerScale OneFS:- Version prior to 9.10.1.6 and below 9.10.1.6 or later is affected.
- Version 9.11.0.0 through 9.12.0.1 and below 9.13.0.0 or later is affected.