Product:
ECS and ObjectScale
Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0 contain an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-26946 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and possess high privileges. By leveraging the improper privilege management, the attacker can elevate their privileges, potentially gaining unauthorized access to sensitive data or system functions.
Affected Products
- Dell ECS versions 3.8.1.0 through 3.8.1.7: These versions are vulnerable due to improper privilege management.
- Dell ObjectScale versions prior to 4.3.0.0: Earlier versions are also affected by the same vulnerability.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest versions of Dell ECS and ObjectScale that address the privilege management issues. Regularly applying security updates and monitoring for unauthorized access can also help reduce the risk of exploitation.