CVE-2026-40636 is a critical vulnerability in Dell ECS and Dell ObjectScale products caused by the use of hard-coded credentials (CWE-798). A local attacker without authentication privileges could exploit this weakness to access the filesystem, potentially compromising confidentiality, integrity, and availability. The affected versions include Dell ECS 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and full impact on confidentiality, integrity, and availability. No patch or official remediation level has been published by Dell as of the data provided.

Successful exploitation of this vulnerability could allow an unauthenticated attacker with local access to gain filesystem access, leading to full compromise of the affected system's confidentiality, integrity, and availability. This could result in unauthorized data access, modification, or disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for any suspicious activity. Avoid deploying affected versions in untrusted environments. Follow Dell's official communications for updates on patches or mitigations.