CVE-2025-36591

4.4 MEDIUM

Published 2026-09-16 · Updated 2026-09-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-327

References

https://www.dell.com/support/kbdoc/en-in/000505935/dsa-2026-393-security-update-for-dell-objectscale-multiple-vulnerabilities

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.