Dell PowerScale OneFS, Versionen 9.5.0.0 bis 9.10.1.6 und Versionen 9.11.0.0 bis 9.13.0.1, enthält eine fehlerhafte Berechtigungszuweisungsschwachstelle. Ein Angreifer mit geringen Rechten und lokalem Zugriff c

Successful exploitation of CVE-2026-27102 could grant an attacker unauthorized access to sensitive data and system resources within the PowerScale OneFS environment. A low-privileged user could gain administrative privileges, allowing them to modify configurations, access restricted files, and potentially disrupt storage operations. The blast radius extends to any data stored on the affected OneFS cluster, and the attacker could leverage elevated privileges for lateral movement within the network if other systems are accessible from the OneFS server. This vulnerability highlights the importance of least privilege principles and robust access controls within storage infrastructure.

1. Reserviert2026-02-17
2. Veröffentlicht2026-04-08
3. Geändert2026-04-13
4. EPSS aktualisiert2026-04-16

The primary mitigation for CVE-2026-27102 is to upgrade Dell PowerScale OneFS to version 9.10.1.7 or later. If an immediate upgrade is not feasible, consider restricting local access to the OneFS cluster and implementing strict access control lists (ACLs) to limit the potential impact of a successful exploit. Review user permissions and ensure that only authorized personnel have access to sensitive data and administrative functions. Monitor system logs for suspicious activity and implement intrusion detection systems (IDS) to detect potential exploitation attempts. After upgrading, confirm the fix by attempting to execute commands with a low-privileged user account and verifying that privilege escalation is prevented.