CVE Intelligence
Analysis AI-assisted

CVE-2026-22278: Dell PowerScale OneFS Improper Restriction of Excessive Authentication Attempts

Dell PowerScale OneFS versions before 9.13.0.0 are affected by CVE-2026-22278, an improper restriction of excessive authentication attempts (CWE-307). NVD rates it critical at 9.8 under CVSS 3.1, and the record describes possible unauthorized access by unauthenticated remote attackers. No confirmed exploitation appears in the sources consulted.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

Dell PowerScale OneFS is affected by CVE-2026-22278, which is mapped to CWE-307 (improper restriction of excessive authentication attempts). The record describes versions before 9.13.0.0 as affected. According to the description, an unauthenticated attacker with remote access could potentially gain unauthorized access.

Impact

  • NVD assigns a critical score of 9.8 under CVSS 3.1, with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
  • Other scores in the record for the same version are 8.1 from Dell and from an EMC security alert address, so scores differ between providers.
  • The record lists the technical impact as total in its SSVC data.

Affected products and versions

  • Dell PowerScale OneFS: before 9.13.0.0.
  • The record gives the range as no lower bound up to but excluding 9.13.0.0.

Exploitation status

  • The CISA KEV catalog entry in the record is not listed.
  • No confirmed exploitation appears in the sources consulted.

Remediation and mitigation

  • The record contains no fixed-version list. Review the Dell security advisory and apply the vendor's OneFS update for your branch.
  • Limit network exposure of management and authentication interfaces to trusted networks.
  • Enforce strong authentication policies and account lockout or throttling where the platform supports them.

Detection guidance

  • Review authentication logs for unusually high numbers of failed attempts from a single source or against a single account.
  • Alert on bursts of failed logins against OneFS access points and correlate them with network sources.

Limitations of the available information

  • The record does not list fixed versions, so the first fixed release must be confirmed in the vendor advisory.
  • Scores differ between NVD and Dell-related providers, and the reason for the difference is not stated.
  • The record does not describe the specific authentication path or conditions required for exploitation.

Frequently asked questions

Which Dell PowerScale OneFS versions are affected by CVE-2026-22278?

The record lists versions before 9.13.0.0 as affected. Confirm the exact branches and fixed releases in the Dell advisory.

Is CVE-2026-22278 known to be exploited in the wild?

The CISA KEV entry in the record is not listed, and no confirmed exploitation appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.