CVE-2026-40633
Received Received - Intake

Information Disclosure in Dell PowerScale OneFS

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: Dell

Description
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-15
Last Modified
2026-07-15
Generated
2026-07-15
AI Q&A
2026-07-15
EPSS Evaluated
N/A
NVD
CVE-2026-40633
EUVD
EUVD-2026-44607

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell powerscale_onefs From 9.5.0.0 (inc) to 9.10.1.7 (inc)
dell powerscale_onefs From 9.11.0.0 (inc) to 9.13.0.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-532 The product writes sensitive information to a log file.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2 have a vulnerability where sensitive information is inserted into log files. A low-privileged attacker with local access could exploit this to disclose confidential data.

Impact Analysis

This vulnerability could allow an attacker to access sensitive information logged by the system, potentially leading to data breaches or unauthorized disclosure of confidential data.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized disclosure of sensitive data, potentially resulting in legal penalties or reputational damage.

Mitigation Strategies

Update Dell PowerScale OneFS to a version beyond 9.13.0.2 or apply the latest security patches to address the vulnerability. Restrict local access for low-privileged users to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-40633. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart