CVE-2026-26947
MediumCVSS 6.7Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Risk Assessment
An attacker with high privileges and local access can elevate their privileges, potentially leading to further escalation and system compromise. However, it requires local access and high privileges.
Recommendation
Update Dell ECS to a version later than 3.8.1.7 and Dell ObjectScale to version 4.4.0.0 or later, which contain the fix for this issue.
Other vulnerabilities in Dell ECS, Dell ObjectScale
See all- CVE-2025-36591Medium
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could exploit this vulnerability, leading to information exposure.
- CVE-2026-40636Critical
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0 contain a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for the attacker.
Original NVD description (English source)
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.