CVE-2026-28261 PUBLISHED

Assigner: dell
Reserved: 25.02.2026 Published: 08.04.2026 Updated: 08.04.2026

Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to secret exposure. The attacker may be able to use the exposed secret to access the vulnerable system with privileges of the compromised account.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor Dell
Product Elastic Cloud Storage
Versions Default: unaffected
  • affected from 0 to 4.2.0.1 or later (excl.)
Vendor Dell
Product ObjectScale
Versions Default: unaffected
  • affected from 0 to 4.1.0.3 (excl.)
  • affected from 0 to 4.2.0.1 or later (excl.)

References

Problem Types

  • CWE-532: Insertion of Sensitive Information into Log File CWE