CVE catalog

CVE-2026-32803

Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privilege

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.09% · Oct 25, 2026

Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpepowerscale_onefsNot reported9.5.1.7fixed
Cpepowerscale_onefsNot reported9.7.1.14fixed
Cpepowerscale_onefsNot reported9.10.1.6fixed
Cpepowerscale_onefsNot reported9.13.0.0fixed
Cpepowerscale_onefsNot reported9.13.0.0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpepowerscale_onefscpeNot reported9.5.1.7Not reportedNot reportedNot reported
Cpepowerscale_onefscpeNot reported9.7.1.14Not reportedNot reportedNot reported
Cpepowerscale_onefscpeNot reported9.10.1.6Not reportedNot reportedNot reported
Cpepowerscale_onefscpeNot reported9.13.0.0Not reportedNot reportedNot reported
Cpepowerscale_onefscpeNot reported9.13.0.0Not reportedNVD-CVE-2026-32803Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]