CVE-2026-40633
Analyzed Analyzed - Analysis Complete

Information Disclosure in Dell PowerScale OneFS

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: Dell

Description
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-15
Last Modified
2026-07-15
Generated
2026-08-04
AI Q&A
2026-07-15
EPSS Evaluated
2026-08-03
NVD
CVE-2026-40633
EUVD
EUVD-2026-44607

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell powerscale_onefs From 9.11.0.0 (inc) to 9.13.1.0 (exc)
dell powerscale_onefs From 9.5.0.0 (inc) to 9.10.1.8 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-532 The product writes sensitive information to a log file.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2 have a vulnerability where sensitive information is inserted into log files. A low-privileged attacker with local access could exploit this to disclose confidential data.

Detection Guidance

This vulnerability involves sensitive information being logged improperly in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2. Detection requires checking log files for exposed sensitive data. Review OneFS logs for unusual entries containing credentials or system details. Use commands like 'grep' to search logs for keywords such as 'password', 'token', or 'secret'. Ensure log monitoring tools are configured to alert on suspicious log entries.

Impact Analysis

An attacker could gain access to sensitive information logged by the system, potentially leading to further attacks or data breaches. This could expose confidential data stored or processed by the affected Dell PowerScale OneFS systems.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of personal or sensitive data, violating compliance requirements under GDPR, HIPAA, and other regulations. Organizations may face legal penalties, reputational damage, and loss of trust due to non-compliance.

Mitigation Strategies

Update Dell PowerScale OneFS to a version beyond 9.13.0.2 or apply the latest security patches to address the vulnerability. Restrict local access for low-privileged users to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-40633. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart