6.7 MediumCWE-269
CVE-2026-26947
Dell ECS vulnerability
DellECS
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.1%probability of exploitation in the next 30 days
Higher than 4% of scored CVEs
SeverityCVSS
6.7Medium
Description NVD
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Coverage 1 article · 1 outlet
- Dell Warns of Critical ObjectScale Flaw Enabling Remote Code ExecutionSecurityOnline · first in our coverage · mentions it in passing