CVE-2026-46460 Dell CVE debrief

Who should care

Defenders responsible for Dell PowerScale OneFS systems, particularly those with low-privileged adjacent network access, should assess exposure and prioritize verification and remediation.

Why it matters

CVE-2026-46460 is an Incorrect Authorization vulnerability in Dell PowerScale OneFS that could allow a low-privileged adjacent network attacker to modify system logs. Defenders should prioritize verifying and applying the vendor's security update, reviewing system logs, and implementing network segmentation to limit attacker access.

• Potential unauthorized modification of system logs by a low-privileged adjacent network attacker
• Need to verify and apply the vendor's security update to prevent exploitation
• Importance of reviewing system logs for unauthorized modifications
• Network segmentation may be necessary to limit adjacent network attacker access

Technical summary

Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0, contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized modification of system logs. The vulnerability has a CVSS score of 3.5 and is considered to be of low severity. Defenders should prioritize verifying and applying the vendor's security update, reviewing system logs, and implementing network segmentation to limit attacker access.

Defensive priority

Defenders should prioritize verifying and applying the vendor's security update.

Recommended defensive actions

• Verify and apply the vendor's security update
• Review system logs for unauthorized modifications
• Implement network segmentation to limit adjacent network attacker access
• Monitor for suspicious activity
• Conduct regular vulnerability assessments
• Maintain up-to-date incident response plans
• Review and update security policies

Evidence notes

The CVE record and NVD entry provide details on the vulnerability and affected versions. The vulnerability is considered to be of low severity, with a CVSS score of 3.5. Dell PowerScale OneFS versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0 are affected. There is no evidence of public exploitation. Defenders should verify the affected versions and apply the vendor's security update.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.