CVE-2026-26947Patch

LOWCVSS 6.7 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-09-13); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-13: 1Mentions · 2026-09-24: 1Patch / Workaround · 2026-09-13: 1Patch / Workaround · 2026-09-24: 1Technical Details · 2026-09-13: 1Technical Details · 2026-09-24: 109-1309-24
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • iototsecnews@iototsecnews
    Patch

    Dell ObjectScale の脆弱性 CVE-2026-70416/43936 などが FIX:RCE の恐れ https://iototsecnews.jp/2026/09/13/critical-dell-objectscale-vulnerabilities-allows-malicious-users-to-compromise-the-affected-system/ Dell ObjectScale および Dell Elastic Cloud Storage (ECS) における深刻な脆弱性を解説する記事です。未認証の第三者による遠隔からの任意のプログラム実行や不正アクセスを許す欠陥が潜んでおり、最悪の場合にはストレージ環境の乗っ取り/データの不正閲覧/設定の改ざん/処理の妨害といった甚大な被害を及ぼす恐れがあります。該当する主な脆弱性は CVE-2026-70416/CVE-2025-43936/CVE-2026-26947/CVE-2025-36591/CVE-2026-76104 です。利用者は、影響を受けない最新バージョンへの更新または適切なアクセス制限の適用といった回避策を迅速に講じることが推奨されます。 #CVE202643936 #CVE202670416 #Dell #ObjectScale #Vulnerability

    Post summary

    The tweet announces multiple critical Dell ObjectScale/ECS vulnerabilities (including CVE-2026-70416 and CVE-2025-43936) with RCE risk and urges users to update to the latest version or apply access restrictions as remediation.

    0000086
    515 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    Alert: Dell ObjectScale and ECS platforms suffer a critical RCE vulnerability (CVE-2026-70416) allowing unauthenticated attackers remote code execution. Other serious issues include improper authentication (CVE-2025-43936), broken crypto (CVE-2025-36591), and privilege escalation (CVE-2026-26947). Dell urges upgrading to version 4.4.0.0 or 4.2.0.1 and restricting admin interfaces until patches are applied. #Security #Vulnerability #Dell #ObjectScale #CVE2026 #Cybersecurity https://thedailytechfeed.com/critical-flaws-found-in-dell-objectscale-remote-code-execution-risk/

    Post summary

    The text announces multiple critical vulnerabilities in Dell ObjectScale/ECS platforms and prominently urges upgrading to specific patched versions (4.4.0.0/4.2.0.1) with interim mitigations, making Patch the primary classification.

    0000097
    727 followersView on X

Explore more