CVE-2025-26477: Dell Elastic Cloud Storage

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Affected products

• Dell Elastic Cloud Storage: up to and including 3.8.1.4
• Dell Objectscale: before 4.0.0.0 (fixed in 4.0.0.0)

Published 2025-04-17. Last modified 2026-06-17.