PT-2026-4345 · Dell · Dell Objectscale+1

Published 2026-01-16 · Updated 2026-02-18 · CVE-2026-22273

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell ECS versions 3.8.1.0 through 3.8.1.7 Dell ObjectScale versions prior to 4.2.0.0

Description The issue concerns the use of default credentials within the Dell ECS and Dell ObjectScale operating system. A low-privileged attacker with remote access could potentially exploit this to gain elevated privileges.

Recommendations Dell ECS versions 3.8.1.0 through 3.8.1.7 should be updated to a newer version that addresses the default credential issue. Dell ObjectScale versions prior to 4.2.0.0 should be updated to version 4.2.0.0 or later to resolve the default credential issue.

Fix

LPE

Weakness Enumeration

CWE-1392

Related Identifiers

BDU:2026-00753

CVE-2026-22273

Affected Products

Dell Ecs

Dell Objectscale

References · 9

• https://dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-22273 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00753 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22273 · Security Note
• https://twitter.com/cracbot/status/2016466372902175075 · Twitter Post
• https://t.me/CVEtracker/42822 · Telegram Post
• https://twitter.com/CVEnew/status/2014706934989959198 · Twitter Post
• https://t.me/cveNotify/152313 · Telegram Post
• https://t.me/cveNotify/149661 · Telegram Post