CVE Vulnerabilities

CVE-2025-26478

Improper Certificate Validation

Published: Apr 17, 2025 | Modified: Aug 01, 2025
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Elastic_cloud_storage Dell * 3.8.1.4 (including)
Objectscale Dell * 4.0.0.0 (excluding)

Potential Mitigations

References