What is the CVSS score of CVE-2026-22271?

CVE-2026-22271 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Objectscale are affected by CVE-2026-22271?

Elastic Cloud Storage versions up to 3.8.1.7 transmit sensitive data in cleartext, exposing customer information and credentials to network interception attacks.

How to fix or mitigate CVE-2026-22271?

Within 24 hours: Inventory all Elastic Cloud Storage deployments and identify systems running versions 3.8.1.7 or earlier; implement network segmentation to restrict ECS traffic to encrypted channels only. Within 7 days: Deploy packet-level encryption (TLS/SSL enforcement) at network borders; audit logs for unauthorized access attempts; establish communication with Elastic support for patch timeline. Within 30 days: Prepare and execute upgrade plan to patched ECS versions; complete deployment of security controls; conduct post-remediation validation testing.

Objectscale CVE-2026-22271

HIGH

Cleartext Transmission of Sensitive Information (CWE-319)

2026-01-23 security_alert@emc.com

Information Disclosure Objectscale Elastic Cloud Storage

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 23, 2026 - 09:15 nvd

HIGH 7.5

DescriptionCVE.org

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

AnalysisAI

Elastic Cloud Storage versions up to 3.8.1.7 is affected by cleartext transmission of sensitive information (CVSS 7.5).

Technical ContextAI

This vulnerability (CWE-319: Cleartext Transmission of Sensitive Information) affects Elastic Cloud Storage. Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.