CVE-2026-22273

Published: Jan 23, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: security_alert@emc.com (Secondary)

Description

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected (2)

Products: Dell: Elastic Cloud Storage, Objectscale

2 products

Elastic Cloud Storage

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dell Elastic Cloud Storage	From 3.8.1.0 to 4.2.0.0
Dell Objectscale	Before 4.2.0.0

Related CWEs

Use of Default Credentials

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

References (1)

https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities

Source: security_alert@emc.com

MitigationVendor Advisory

Timeline

No history available yet.