SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-70425

MEDIUM · CVSS 6.7 EPSS 0.41% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

Dell PowerScale OneFS versions 9.5.0.0 through 9.14.0.1 are susceptible to a command injection vulnerability that allows an admin-level local attacker to execute arbitrary commands. Successful exploitation could result in elevated privileges to root, compromising the confidentiality, integrity, and availability of the system. Organizations using affected versions should prioritize patching to mitigate potential risks associated with this vulnerability.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-70425
Severity
MEDIUM
CVSS
6.7
EPSS
0.41%

Original NVD Description

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability.