Known vulnerabilities in Dell ECS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-26947 | Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper… | 6.7 Medium | Sep 16, 2026 |
| CVE-2022-31231 | Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module | 5.9 Medium | May 22, 2026 |
| CVE-2026-26946 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege… | 6.7 Medium | May 11, 2026 |
| CVE-2026-35157 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper… | 5.8 Medium | May 11, 2026 |
| CVE-2025-43992 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication… | 5.6 Medium | May 11, 2026 |
| CVE-2026-40636 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded… | 9.8 Critical | May 11, 2026 |
| CVE-2025-26476 | Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key… | 8.4 High | Aug 4, 2025 |
| CVE-2025-30483 | Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into… | 5.5 Medium | Jul 15, 2025 |
| CVE-2025-26477 | Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability | 4.3 Medium | Apr 17, 2025 |
| CVE-2025-26478 | Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability | 3.1 Low | Apr 17, 2025 |
| CVE-2024-51540 | Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of… | 8.1 High | Dec 26, 2024 |
| CVE-2024-52534 | Dell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay vulnerability | 5.4 Medium | Dec 25, 2024 |
| CVE-2024-38485 | Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability | 4.3 Medium | Dec 9, 2024 |
| CVE-2024-30473 | Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management | 4.9 Medium | Jul 18, 2024 |
| CVE-2024-22459 | Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper… | 6.8 Medium | Feb 28, 2024 |
| CVE-2023-25934 | DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability | 5.9 Medium | May 4, 2023 |
Other Dell products
PowerScale OneFS 175
CPG BIOS 110
Secure Connect Gateway 5.0 - Appliance 104
Secure Connect Gateway 5.0 - Application 103
PowerProtect Data Domain 82
Unity 62
Wyse Management Suite 62
Secure Connect Gateway (SCG) Policy Manager 45
OpenManage Enterprise 41
PowerEdge Platform 32
SmartFabric OS10 Software 31
PowerProtect Data Manager 27