CVE-2026-28261

CVE-2026-28261 is an Insertion of Sensitive Information into Log File vulnerability affecting Dell Elastic Cloud Storage version 3.8.1.7 and prior, and Dell ObjectScale versions prior to 4.1.0.3 and version 4.2.0.0. The flaw allows low-privileged attackers with local access to the affected systems to extract sensitive information, including secrets, from log files. Attackers could subsequently leverage exposed credentials to gain elevated access to vulnerable systems. The vulnerability has a CVSS v3.1 base score of 5.5 (Medium), with a local attack vector and low attack complexity requiring low privileges and no user interaction. The primary impact is a high confidentiality loss, while integrity and availability remain unaffected. The EPSS score of 0.00014 indicates minimal prevalence in the wild relative to other CVEs. There is no evidence of active exploitation in the wild, no indication of public exploit code availability, and the vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog. Community attention remains minimal. Organizations using the affected Dell products should prioritize patching to the remediated versions, though the low exploitation likelihood should be balanced against other critical security priorities.