PT-2026-4344 · Dell · Dell Objectscale+1

Published 2026-01-16 · Updated 2026-02-18 · CVE-2026-22271

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell ECS versions 3.8.1.0 through 3.8.1.7 Dell ObjectScale versions prior to 4.2.0.0

Description The Dell ECS storage platform and Dell ObjectScale have an issue involving the cleartext transmission of sensitive information. A remote, unauthenticated attacker could potentially exploit this to expose information.

Recommendations Update Dell ECS to a version later than 3.8.1.7. Update Dell ObjectScale to version 4.2.0.0 or later.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2026-00752

CVE-2026-22271

Affected Products

Dell Ecs

Dell Objectscale

References · 9

• https://bdu.fstec.ru/vul/2026-00752 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22271 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22271 · Security Note
• https://t.me/cveNotify/149659 · Telegram Post
• https://twitter.com/CVEnew/status/2014706936059470316 · Twitter Post
• https://twitter.com/cracbot/status/2016466371027353644 · Twitter Post
• https://t.me/cveNotify/152312 · Telegram Post
• https://t.me/CVEtracker/42820 · Telegram Post