CVE-2025-26481 HIGH

CVE-2025-26481

Vendor Dell

Product PowerScale OneFS

Weakness CWE-400

Published May 15, 2025

Last update May 16, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Dell PowerScale OneFS, versions 9.4.0.0 through 9.9.0.0, contains an uncontrolled resource consumption vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to denial of service.

Key dates

02Disclosure timeline

May 15, 2025 CVE published

May 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-26481 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2021-31368 Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic CVE-2025-33068 Windows Standards-Based Storage Management Service Denial of Service Vulnerability CVE-2022-34335 IBM Sterling Partner Engagement Manager denial of service CVE-2025-59975 Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS CVE-2025-27081 HPE NonStop OSM Service Connection Suite, Denial of Service vulnerability