Vulnerability Details CVE-2025-26478
Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.8%
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2025-26478
-
cpe:2.3:a:dell:elastic_cloud_storage:-
-
cpe:2.3:a:dell:elastic_cloud_storage:3.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.0.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.0.1
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.1.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.1.1
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.1.2
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.2.2
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.2.3
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.2.4
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.2.5
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.2.6
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.1
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.2
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.3
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.4
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.5
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.6
-
cpe:2.3:a:dell:elastic_cloud_storage:3.7.0.7
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.0.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.0.1
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.0.2
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.0.3
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.0.4
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.0.5
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.0.6
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.1.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.1.1
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.1.2
-
cpe:2.3:a:dell:elastic_cloud_storage:3.8.1.3
-
cpe:2.3:a:dell:objectscale:*