What is the CVSS score of CVE-2026-24511?

CVE-2026-24511 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-24511?

Yes, a patch is available for CVE-2026-24511. Update the affected software to the latest version immediately.

Powerscale Onefs CVE-2026-24511

EUVD-2026-20445 MEDIUM

Error Message Information Leak (CWE-209)

2026-04-08 dell

GHSA-jg6v-crq7-f587

Information Disclosure Dell Powerscale Onefs

4.4

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (dell) · only source for this CVE.

CVSS VectorVendor: dell

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

9.10.1.7

EUVD ID Assigned

Apr 08, 2026 - 13:16 euvd

EUVD-2026-20445

Analysis Generated

Apr 08, 2026 - 13:16 vuln.today

CVE Published

Apr 08, 2026 - 12:28 nvd

MEDIUM 4.4

DescriptionCVE.org

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive information vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.

AnalysisAI

Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.6 and 9.11.0.0 through 9.13.0.0 disclose sensitive information through error messages accessible to high-privileged local attackers. The vulnerability stems from improper error handling (CWE-209) that exposes confidential data in system responses, requiring local access and administrative privileges to exploit. With a CVSS score of 4.4 reflecting high confidentiality impact but low attack complexity and no public exploit identified at time of analysis, this represents a moderate risk primarily to organizations where insider threats or compromised admin accounts pose concerns.

Technical ContextAI

Dell PowerScale OneFS is a distributed storage operating system for isilon storage arrays. The vulnerability exploits improper error message generation mechanisms in the application code, where error handling routines fail to sanitize or redact sensitive information before returning responses to privileged users. CWE-209 (Information Exposure Through an Error Message) indicates the root cause is insufficient input validation or output encoding in exception handling paths. The affected product runs on Dell storage infrastructure and manages enterprise data, making information disclosure particularly sensitive given the likely presence of encryption keys, system credentials, or metadata exposure through error logs and system responses.

RemediationAI

Upgrade Dell PowerScale OneFS to version 9.10.1.7 or later to resolve this vulnerability. Users with systems at 9.11.0.0 through 9.13.0.0 should consult Dell's DSA-2026-125 security update bulletin for the corresponding patched versions in the 9.11+ branch. Until patches can be deployed, restrict administrative access to PowerScale management interfaces and monitor audit logs for suspicious administrative activity that might indicate exploitation attempts. Organizations should apply updates according to Dell's published advisory at https://www.dell.com/support/kbdoc/en-us/000449337/dsa-2026-125-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities.