Is CVE-2026-46460 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-46460 being exploited in the wild.

How severe is CVE-2026-46460?

Low severity, with a CVSS score of 3.5, published 9 September 2026.

Which products and versions are affected?

Dell PowerScale OneFS 9.5.0.0 through 9.7.1.15, 9.8.0.0 through 9.13.1.0, prior to 9.15.0.0.

Is there a fix for CVE-2026-46460?

A patch was published on 2026-09-09: Version 9.7.1.16 or later for 9.5–9.7 branch; version 9.13.1.1 or later for 9.11–9.13 branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-46460 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-46460?

Check whether you run Dell PowerScale OneFS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-46460: Dell PowerScale OneFS incorrect authorization in system logs

CVE-2026-46460 · Severity: low · CVSS 3.5 · Published 2026-09-09

Dell PowerScale OneFS is a storage operating system used in enterprise data centers. A low-privileged attacker with network access can bypass authorization controls and modify system logs, potentially hiding unauthorized activities or tampering with audit records critical for compliance and incident investigation.

Technologies: Dell PowerScale OneFS. Vendors: Dell.

Quick answers

Is CVE-2026-46460 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-46460 being exploited in the wild.
How severe is CVE-2026-46460?: Low severity, with a CVSS score of 3.5, published 9 September 2026.
Which products and versions are affected?: Dell PowerScale OneFS 9.5.0.0 through 9.7.1.15, 9.8.0.0 through 9.13.1.0, prior to 9.15.0.0.
Is there a fix for CVE-2026-46460?: A patch was published on 2026-09-09: Version 9.7.1.16 or later for 9.5–9.7 branch; version 9.13.1.1 or later for 9.11–9.13 branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-46460 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-46460?: Check whether you run Dell PowerScale OneFS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is an incorrect authorization vulnerability in Dell PowerScale OneFS affecting versions 9.5.0.0 through 9.7.1.15, 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0. A low-privileged adjacent network attacker can exploit weak authorization checks to achieve unauthorized modification of system logs. The vulnerability requires the attacker to already have low-privilege credentials on an adjacent network. Patches are available: version 9.7.1.16 or later for the 9.5–9.7 branch and version 9.13.1.1 or later for the 9.11–9.13 branch.

Affected products

Dell PowerScale OneFS 9.5.0.0 through 9.7.1.15, 9.8.0.0 through 9.13.1.0, prior to 9.15.0.0

Timeline

2026-09-09: disclosed
2026-09-09: patched: Version 9.7.1.16 or later for 9.5–9.7 branch; version 9.13.1.1 or later for 9.11–9.13 branch

References

https://www.dell.com/support/kbdoc/en-us/000505684/dsa-2026-360-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.