CVE Database · CVE-2025-26478
CVSS v3.1
3.1
EPSS
0.13%
Published
Apr 17, 2025
Modified
Aug 1, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NWeaknesses (CWE)
Affected Products (2)
References (1)