Dell PowerScale OneFS <9.10.1.6 or 9.119.12 Uncontrolled Search Path (CVE202622270)
CVE-2026-22270 Published on March 4, 2026
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
Vulnerability Analysis
CVE-2026-22270 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is a DLL preloading Vulnerability?
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
CVE-2026-22270 has been classified to as a DLL preloading vulnerability or weakness.
Products Associated with CVE-2026-22270
Want to know whenever a new CVE is published for Dell Powerscale Onefs? stack.watch will email you.
Affected Versions
Dell PowerScale OneFS,:- Version 9.11.0.0 through 9.12.0.1 and below 9.13.0.0 or later is affected.
- Version prior to 9.10.1.6 and below 9.10.1.6 or later is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.