CVE-2026-22273CWE-1392

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS

High · published January 23, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

⚡ An attacker with just remote access can leverage default credentials in Dell ECS and ObjectScale to elevate their privileges! 🔒 It's like leaving the backdoor of your house wide open with a sign saying, 'Welcome, feel free to roam around!' If someone knows your default access codes, they could wander into sensitive areas without even trying. This vulnerability allows low-privileged attackers to gain higher access levels, potentially letting them manipulate critical data or configurations. Imagine someone sneaking into your office and changing all the locks without your knowledge—absolutely devastating!

Put simply

It's like leaving the backdoor of your house wide open with a sign saying, 'Welcome, feel free to roam around!' If someone knows your default access codes, they could wander into sensitive areas without even trying. Dell ECS versions 3.8.1.0 to 3.8.1.7 and ObjectScale versions before 4.2.0.0 have a use of default credentials flaw, enabling remote attackers to gain unauthorized access and escalate their privileges.

What to do

This vulnerability allows low-privileged attackers to gain higher access levels, potentially letting them manipulate critical data or configurations. Imagine someone sneaking into your office and changing all the locks without your knowledge—absolutely devastating! To patch this, update your Dell ECS to version 3.8.1.8 or later and upgrade ObjectScale to 4.2.0.0 or above. Additionally, change any default credentials to secure, unique passwords to fortify your defenses! You've got this! Follow these steps, and you'll have your system secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2026-01-23T09:14Z
EPSS history
Timeline
  • 23 JAN 09:14Z
    Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS
    cvelistv5