CVE-2025-26477: Input Validation
Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell ECSto a version that resolves this vulnerability.Fixed in 3.8.1.4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26477?
CVE-2025-26477 is classified as a low severity vulnerability, but it still poses a risk of code execution.
How do I fix CVE-2025-26477?
To mitigate CVE-2025-26477, upgrade to Dell ECS version 3.8.1.5 or later.
Who can exploit CVE-2025-26477?
CVE-2025-26477 can be exploited by low privileged attackers with remote access to the affected system.
What can happen if CVE-2025-26477 is exploited?
If exploited, CVE-2025-26477 could allow an attacker to execute arbitrary code on the affected server.
Which versions of Dell ECS are affected by CVE-2025-26477?
CVE-2025-26477 affects all versions of Dell ECS up to and including 3.8.1.4.