CVE-2026-46460

Awaiting Analysis Awaiting Analysis - Queue

Incorrect Authorization in Dell PowerScale OneFS

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized modification of system logs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-30

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-46460

EUVD

EUVD-2026-75106

Affected Vendors & Products

Vendor	Product	Version / Range
dell	powerscale_onefs	From 9.5.0.0 (inc) to 9.7.1.15 (inc)
dell	powerscale_onefs	From 9.8.0.0 (inc) to 9.13.1.0 (inc)
dell	powerscale_onefs	to 9.15.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This is an Incorrect Authorization vulnerability in Dell PowerScale OneFS software. It affects versions 9.5.0.0 through 9.7.1.15, 9.8.0.0 through 9.13.1.0, and versions before 9.15.0.0. A low-privileged attacker on the same network could exploit it to modify system logs without proper authorization.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this vulnerability on a network or system. Dell PowerScale OneFS systems should be checked for unauthorized modifications to system logs, but no actionable commands are available in this context.

Impact Analysis

An attacker could alter system logs, potentially hiding malicious activity or creating false evidence. This could lead to undetected security breaches, compliance violations, or incorrect forensic analysis during incident investigations.

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized changes to audit logs. GDPR requires accurate data processing records, and HIPAA mandates secure, tamper-evident logs. Unauthorized modifications may violate these requirements.

Mitigation Strategies

Update Dell PowerScale OneFS to version 9.15.0.0 or later to address the Incorrect Authorization vulnerability. Ensure all versions between 9.5.0.0 and 9.13.1.0 are patched as they are affected.

Hi! I’m here to help you understand CVE-2026-46460. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70