CVE-2026-22271CWE-319

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information…

High · published January 23, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

⚡ Your sensitive data is taking a stroll down the information highway unencrypted! Unauthenticated attackers can tap into cleartext transmissions in Dell ECS and ObjectScale, versions 3.8.1.0 to 3.8.1.7 and prior to 4.2.0.0 respectively. 🌐 Think of it as sending a postcard instead of a sealed letter – anyone who intercepts it can read your personal notes without breaking a sweat! The vulnerability allows unauthorized access to sensitive information simply because it’s traveling in plain view. This could result in attackers gaining access to confidential data, leading to data breaches that may expose business strategies, customer information, or financial records. Imagine someone stealing your diary while it’s left wide open on your desk – absolutely devastating!

Put simply

Think of it as sending a postcard instead of a sealed letter – anyone who intercepts it can read your personal notes without breaking a sweat! The vulnerability allows unauthorized access to sensitive information simply because it’s traveling in plain view. The vulnerability exists due to insecure transmission of sensitive information, allowing an unauthenticated remote attacker to intercept and read the data being sent over the network. This exploit occurs specifically in Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.2.0.0.

What to do

This could result in attackers gaining access to confidential data, leading to data breaches that may expose business strategies, customer information, or financial records. Imagine someone stealing your diary while it’s left wide open on your desk – absolutely devastating! To patch this vulnerability, upgrade to Dell ECS version 3.8.1.8 or later and Dell ObjectScale version 4.2.0.0 or later. Additionally, ensure all data transmissions are encrypted using secure protocols like TLS to protect sensitive information. You've got this! By following these steps, you’ll secure your data and bolster your defenses. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.1th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-01-23T08:54Z
EPSS history
Timeline
  • 23 JAN 08:54Z
    Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information…
    cvelistv5