Dell ECS vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell ECS: 5 record(s), with affected versions and fixes.
CVE-2022-31231
High · 7.5
CWE-284 May 22, 2026
Improper Access Control in Dell Elastic Cloud Storage
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.
CVE-2026-40636
High · 7.8
CWE-798 May 11, 2026
Use of Hard-coded Credentials in Dell Elastic Cloud Storage
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.
CVE-2026-35157
Critical · 9.8
CWE-1236 May 11, 2026
CSV Injection in Dell Elastic Cloud Storage
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-26946
Medium · 6.7
CWE-269 May 11, 2026
Improper Privilege Management in Dell Elastic Cloud Storage
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2025-43992
Medium · 5.6
CWE-302 May 11, 2026
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0,...
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.