Dell PowerScale OneFS up to 9.5.1.6/9.7.1.13/9.10.1.5/9.12.0.1 insufficient logging

Summaryinfo

A vulnerability marked as problematic has been reported in Dell PowerScale OneFS up to 9.5.1.6/9.7.1.13/9.10.1.5/9.12.0.1. Affected is an unknown function. Performing a manipulation results in insufficient logging. This vulnerability was named CVE-2026-32803. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Dell PowerScale OneFS up to 9.5.1.6/9.7.1.13/9.10.1.5/9.12.0.1. This affects an unknown code. The manipulation with an unknown input leads to a insufficient logging vulnerability. CWE is classifying the issue as CWE-778. When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it. This is going to have an impact on integrity. The summary by CVE is:

Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

It is possible to read the advisory at dell.com. This vulnerability is uniquely identified as CVE-2026-32803 since 03/16/2026. The exploitability is told to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 05/08/2026). The attack technique deployed by this issue is T1562.002 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-28592). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Dell

Name

• PowerScale OneFS

Version

• 9.5.1.0
• 9.5.1.1
• 9.5.1.2
• 9.5.1.3
• 9.5.1.4
• 9.5.1.5
• 9.5.1.6
• 9.7.1.0
• 9.7.1.1
• 9.7.1.2
• 9.7.1.3
• 9.7.1.4
• 9.7.1.5
• 9.7.1.6
• 9.7.1.7
• 9.7.1.8
• 9.7.1.9
• 9.7.1.10
• 9.7.1.11
• 9.7.1.12
• 9.7.1.13
• 9.10.1.0
• 9.10.1.1
• 9.10.1.2
• 9.10.1.3
• 9.10.1.4
• 9.10.1.5
• 9.12.0.0
• 9.12.0.1

License

• commercial

Website

• Vendor: https://www.dell.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion