Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.7 · dellNVD modified 2026-10-26 18:10
Affected (CPE criteria) 2
cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*