CVE-2026-27102 is an incorrect privilege assignment vulnerability affecting Dell PowerScale OneFS in versions 9.5.0.0 through 9.10.1.6 and 9.11.0.0 through 9.13.0.1. This flaw allows a low-privileged attacker with local access to elevate their privileges on affected systems. The vulnerability carries a high CVSS score of 7.8, with a local attack vector requiring low privileges and no user interaction. Exploitation would result in high impact across confidentiality, integrity, and availability, potentially granting unauthorized system access and control to an attacker. As of the current assessment, this vulnerability is not listed on the CISA KEV catalog and shows no active exploitation in the wild. Community attention remains low, with a FAUCET risk score of 49.0 out of 100, and the EPSS score indicates relatively minimal prevalence compared to other documented vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 9.5.0.0, < 9.10.1.7CPE matchmatch criteria | cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:* | ||
>= 9.11.0.0, < 9.13.0.2CPE matchmatch criteria | cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.