CVE-2026-28261 is a vulnerability in Dell Elastic Cloud Storage and Dell ObjectScale where sensitive information is improperly logged, allowing a low privileged local attacker to access secrets from log files. This exposure could lead to unauthorized access using the compromised credentials. The vulnerability affects specific versions of the products as noted. The CVSS 3.1 score of 7.8 reflects high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is available, and the product is not a cloud service, so remediation is not managed by the vendor server-side.

The vulnerability allows exposure of sensitive information through log files, which can be leveraged by a low privileged local attacker to gain access with the privileges of the compromised account. This can lead to significant confidentiality, integrity, and availability impacts on the affected system. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for unauthorized access attempts. Avoid exposing sensitive information in logs through configuration changes if possible.