Dell Objectscale vulnerabilities

24 CVEs affecting Dell Objectscale, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76104, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-70416, published 2026-09-16. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability,…
CVE-2026-56685, published 2026-08-17. High severity, CVSS 7.3. EPSS: 0.7% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with…
CVE-2026-59910, published 2026-08-17. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with…
CVE-2026-56686, published 2026-08-17. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with…
CVE-2025-43936, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this…
CVE-2026-35157, published 2026-05-11. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An…
CVE-2025-26477, published 2025-04-17. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code…
CVE-2026-22273, published 2026-01-23. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote…
CVE-2026-76104, published 2026-09-16. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially…
CVE-2026-40636, published 2026-05-11. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could…

Latest

CVE-2026-59911, published 2026-08-17. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local access could…
CVE-2026-59909, published 2026-08-17. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to…
CVE-2026-56090, published 2026-08-17. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability,…
CVE-2026-56089, published 2026-08-17. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to…