CVE-2025-26478CWE-295

Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability

Low · published April 17, 2025

CVSS v3.1
3.1
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-04-17T11:37Z
EPSS history
Timeline
  • 17 APR 11:37Z
    Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability
    cvelistv5