CVE-2026-32803

#!/bin/bash # PoC for CVE-2026-32803: Insufficient Logging in Dell PowerScale OneFS # This script simulates the behavior of a low-privileged user performing # an action that should be logged but isn't, demonstrating the vulnerability. TARGET_USER="low_priv_user" LOG_FILE="/var/log/isi_audit.log" echo "[+] Attempting to trigger the insufficient logging vulnerability..." # Simulate a configuration change or file modification that lacks logging # In a real scenario, this would be a specific isi command or file operation. # Example: Modifying a local setting that triggers integrity impact. echo "[*] Performing information tampering operation..." # touch /tmp/tampered_file_$(date +%s) # This is a placeholder for the actual vulnerable command. # Check if the operation was logged echo "[*] Checking audit logs for the operation..." if grep -q "tampering_operation" "$LOG_FILE"; then echo "[-] Operation was logged. Vulnerability might be patched." else echo "[+] Success! Operation was NOT logged in $LOG_FILE." echo "[+] The system is vulnerable to CVE-2026-32803." fi

{"cve": {"id": "CVE-2026-32803", "sourceIdentifier": "[email protected]", "published": "2026-05-08T14:16:31.787", "lastModified": "2026-05-08T19:48:35.453", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-778"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*", "versionStartIncluding": "9.5.0.0", "versionEndExcluding": "9.5.1.7", "matchCriteriaId": "DD49097D-38BE-4E64-91AF-B76D76BB3CA0"}, {"vulnerable": true, "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*", "versionStartIncluding": "9.6.0.0", "versionEndExcluding": "9.7.1.14", "matchCriteriaId": "7F746EFA-1B09-4F01-B642-BEB61F0FD3B4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*", "versionStartIncluding": "9.8.0.0", "versionEndExcluding": "9.10.1.6", "matchCriteriaId": "09AFF131-67A0-4CB5-86E6-3DEB73D516C4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*", "versionStartIncluding": "9.11.0.0", "versionEndExcluding": "9.13.0.0", "matchCriteriaId": "23042111-E6E9-4C6B-8A89-2E7E3F44103F"}]}]}], "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000461228/dsa-2026-172-security-update-for-dell-powerscale-onefs-insufficient-logging-vulnerability", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}