CVE-2025-26476 | Vulnerability Database

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-26476
CWE	https://cwe.mitre.org/data/definitions/321.html

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-26476

CWE

https://cwe.mitre.org/data/definitions/321.html

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

Weakness

The product uses a hard-coded, unchangeable cryptographic key.

Potential Mitigations

References

https://www.dell.com/support/kbdoc/en-us/000339134/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability