PT-2026-39588 · Dell · Ecs+1

Michele Damico · Published 2026-05-10 · Updated 2026-06-06 · CVE-2026-40636

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell ECS versions 3.8.1.0 through 3.8.1.7 Dell ObjectScale versions prior to 4.3.0.0

Description An issue involving the use of hard-coded credentials allows an unauthenticated attacker with local access to potentially gain filesystem access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2026-08721

CVE-2026-40636

Affected Products

Ecs

Objectscale

References · 16

• https://dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1 · Vendor Advisory
• https://cve.org/CVERecord?idCVE-2026-40636 · Security Note
• https://bdu.fstec.ru/vul/2026-08721 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-40636 · Security Note
• https://twitter.com/vuldb/status/2053809890242732425 · Twitter Post
• https://twitter.com/lyrie_ai/status/2063398976452166058 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2053800392736026820 · Twitter Post
• https://twitter.com/vuldb/status/2053919356351111222 · Twitter Post
• https://twitter.com/lyrie_ai/status/2063398974426337695 · Twitter Post
• https://twitter.com/CVEnew/status/2053954493964800393 · Twitter Post
• https://twitter.com/KaitanSecurity/status/2053784690738237888 · Twitter Post
• https://twitter.com/the_yellow_fall/status/2054124970729505264 · Twitter Post
• https://t.me/CVEtracker/53367 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1ta318n/critical_vulnerability_in_dell_ecs_and · Reddit Post
• https://twitter.com/lyrie_ai/status/2063398977584652664 · Twitter Post