CVE-2026-28261 Dell CVE debrief

Who should care

Security teams and administrators responsible for Dell Elastic Cloud Storage and Dell ObjectScale systems should be aware of this vulnerability and take steps to mitigate it. They should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Technical summary

The vulnerability, classified as CWE-532, affects Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0. A low privileged attacker with local access could potentially exploit this vulnerability, leading to secret exposure. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. The CVSS vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. To mitigate, review the official advisory or CVE record for affected scope, severity, and vendor guidance. Ensure system logs are monitored for potential exploitation attempts and implement compensating controls to limit access to sensitive information.

Defensive priority

High priority due to the potential for secret exposure and the relatively low privileges required to exploit the vulnerability.

Recommended defensive actions

• Inventory affected Dell Elastic Cloud Storage and Dell ObjectScale systems
• Apply vendor-provided patches or updates
• Monitor system logs for potential exploitation attempts
• Implement compensating controls to limit access to sensitive information
• Consider additional security measures to protect against local attacks
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified

Evidence notes

The CVE record was published on 2026-04-08T13:16:41.533Z and last modified on 2026-07-24T20:10:00.147Z. The NVD entry is currently Analyzed. This vulnerability affects Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0. The vulnerability has a CVSS score of 7.8 and is classified as HIGH severity. The CVSS vector is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.