CVE-2026-40633

Full vulnerability record from the local CVENow database.

Description

Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Severity

MEDIUM

CVSS score

5.5 (v3.1)

Vulnerability status

Analyzed

Source identifier

[email protected]

Published

2026-07-15 11:16:25.463000

Last modified

2026-10-24 22:10:00.210000

View original CVE JSON

{
  "id": "CVE-2026-40633",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-15T11:16:25.463",
  "lastModified": "2026-10-24T22:10:00.210",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure."
    },
    {
      "lang": "es",
      "value": "Las versiones de Dell PowerScale OneFS 9.5.0.0 a 9.10.1.7 y 9.11.0.0 a 9.13.0.2 contienen una vulnerabilidad de Inserción de Información Sensible en Archivo de Registro. Un atacante con bajos privilegios y acceso local podría potencialmente explotar esta vulnerabilidad, lo que llevaría a la revelación de información."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "PowerScale OneFS",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "9.10.1.8 or later",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "9.13.1.0 or later",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-15T13:42:56.612736Z",
          "id": "CVE-2026-40633",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "9.5.0.0",
              "versionEndExcluding": "9.10.1.8",
              "matchCriteriaId": "4B9014F2-F34C-4A16-9668-2E2B4739921F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "9.11.0.0",
              "versionEndExcluding": "9.13.1.0",
              "matchCriteriaId": "6FE2134C-4680-4DDB-B086-D8191971D0B8"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}