Dell TechnologiesCVE-2026-40635

Dell Technologies PowerScale OneFS: denial of service

CVE-2026-40635 · Published Sep 9, 2026 · updated Sep 16, 2026

Medium5.4

Fix: upgrade to 9.13.1.1 or later or later (2 fixed versions below)

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering.

Affected versions

Package	Affected	Fixed in
PowerScale OneFS Product	< 9.13.1.1 or later	9.13.1.1 or later
	< 9.15.0.0 or later	9.15.0.0 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-377

More Dell Technologies advisories

All Dell Technologies

Medium 6.7Sep 9

Dell Technologies PowerScale OneFS: command injectionCVE-2026-70425fixed in 9.13.1.1 or later +1 Low 3.5Sep 9

Dell Technologies PowerScale OneFS: improper authorizationCVE-2026-46460fixed in 9.7.1.16 or later +2 High 7.2Sep 9

Dell Technologies iDRAC10: command injectionCVE-2026-23855fixed in iDRAC9 7.30.10.50 or later +2 Medium 5.3Sep 9

Dell Technologies Secure Connect Gateway 5.0: command injectionCVE-2026-79741fixed in - Application 5.36.00.00 or later +1 Low 3.4Sep 9

Dell Technologies Secure Connect Gateway 5.0: excessive privilegesCVE-2026-79942fixed in - Application 5.36.00.00 or later +1 Low 3.4Sep 9

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0...CVE-2026-79944fixed in - Application 5.36.00.00 or later +1