CVE-2025-26477 MEDIUM

CVE-2025-26477

Vendor Dell

Product ECS

Weakness CWE-20 · Input validation

Published April 17, 2025

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Key dates

02Disclosure timeline

April 17, 2025 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-26477 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html

Related vulnerabilities

04Related CVE

CVE-2026-42544 Granian: Unauthenticated DoS via WebSocket subprotocol header panic CVE-2024-8073 Command Injection Vulnerability in Hillstone Networks Web Application Firewall CVE-2023-35303 USB Audio Class System Driver Remote Code Execution Vulnerability CVE-2021-1513 Cisco SD-WAN Software vDaemon Denial of Service Vulnerability CVE-2021-1466 Cisco SD-WAN vDaemon Buffer Overflow Vulnerability