What is the CVSS score of CVE-2026-49501?

CVE-2026-49501 has a CVSS 3.1 base score of 6.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-49501?

Yes, a patch is available for CVE-2026-49501. Update the affected software to the latest version immediately.

Dell PowerScale OneFS CVE-2026-49501

EUVD-2026-44606 MEDIUM

Improper Privilege Management (CWE-269)

2026-07-15 dell

GHSA-wj98-722h-gmjf

Privilege Escalation Dell Powerscale Onefs

6.7

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

6.7 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

6.7 MEDIUM

Local vector and high-privilege prerequisite confirmed; full C/I/A impact reflects root-level escalation potential on the NAS cluster node; scope unchanged as compromise is contained to the vulnerable OneFS system.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorVendor: dell

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 15, 2026 - 11:02 EUVD

Analysis Generated

Jul 15, 2026 - 10:31 vuln.today

DescriptionCVE.org

Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

AnalysisAI

Elevation of privileges in Dell PowerScale OneFS versions 9.5.0.0-9.10.1.7 and 9.11.0.0-9.13.0.2 allows a high-privileged local attacker to escalate beyond their authorized access level due to improper privilege management (CWE-269). While the CVSS 3.1 base score of 6.7 reflects the local access and high-privilege prerequisites that constrain exploitability, the full C:H/I:H/A:H impact triad signals complete system compromise upon successful exploitation - a serious outcome for enterprise NAS infrastructure that frequently stores sensitive organizational data. No public exploit code or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

Dell PowerScale OneFS is a distributed, scale-out NAS operating system deployed on Dell EMC Isilon hardware clusters, providing enterprise-grade file storage with its own cluster-aware operating environment and role-based administrative access model (e.g., root, ISI admin, read-only admin, backup operators). CWE-269 (Improper Privilege Management) denotes a failure to correctly enforce least-privilege principles - the software either grants excessive permissions during a privileged operation or fails to properly demote permissions afterward, enabling a high-privileged user or process to cross into a higher trust boundary than intended. In a clustered NAS context, this could manifest as a high-privilege account gaining root-equivalent access on one or more cluster nodes. The CPE identifier cpe:2.3:a:dell:powerscale_onefs applies at the application layer of OneFS, affecting both the 9.5.x-9.10.x and 9.11.x-9.13.x release branches as confirmed by Dell advisory DSA-2026-261.

RemediationAI

Consult Dell advisory DSA-2026-261 at https://www.dell.com/support/kbdoc/en-us/000483600/dsa-2026-261-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities for specific patched versions and the recommended upgrade path for both the 9.5.x-9.10.x and 9.11.x-9.13.x branches; exact fix versions are not independently confirmed from the available intelligence beyond the advisory reference, and Dell should be consulted directly for version-specific guidance. As compensating controls prior to patching, restrict the number of accounts holding high-privilege roles within the OneFS access zone configuration to the minimum necessary - this reduces the attack surface since exploitation requires a high-privilege account (PR:H). Additionally, enforce multi-factor authentication on all administrative OneFS accounts to raise the bar for account compromise that would precede exploitation. Enable and review cluster audit logs to detect anomalous privilege changes. Note that these controls reduce the likelihood of exploitation but do not eliminate the underlying vulnerability.