CVE-2026-70425

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability.

  • Published Sep 9, 2026
  • CVSS 6.7 medium
  • 0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-70425 at the National Vulnerability Database