CVE-2026-70416

Dell ObjectScale versions prior to 4.4.0.0 contain a Deserialization of Untrusted Data vulnerability that allows an unauthenticated remote attacker to achieve Remote Code Execution (RCE) . The flaw is rated CVSS 10.0 (CRITICAL) with a network attack vector, low complexity, and changed scope, yiel...

CVE-2025-26478

Dell ECS vulnerable? CVE-2025-26478 affects Dell ECS 3.8.1.4 and earlier. The root cause is improper certificate validation in the server, enabling an unauthenticated attacker with adjacent network access to cause information disclosure. Exploitation details are not provided in the linked documen...

CVE-2025-26477

CVE-2025-26477 affects Dell ECS up to version 3.8.1.4: an Improper Input Validation vulnerability that could allow a low-privileged, remotely authenticated attacker to achieve code execution. The connected documents confirm the affected software and the root cause (input validation error) with a ...

CVE-2026-35157

Dell ECS 3.8.1.0–3.8.1.7 and Dell ObjectScale

CVE-2026-40636

Dell ECS (3.8.1.0–3.8.1.7) and Dell ObjectScale versions before 4.3.0.0 contain a hard-coded credential issue. An unauthenticated, locally-accessible attacker could potentially obtain filesystem access. CVSS 3.1 base score 9.8 (CRITICAL) indicates high impact on confidentiality, integrity, and av...

CVE-2026-22274

CVE-2026-22274 affects Dell EMC/Dell ObjectScale: Dell ECS versions 3.8.1.0–3.8.1.7 and Dell ObjectScale prior to 4.2.0.0 contain a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated remote attacker could intercept and modify information in tran...

CVE-2026-22273

Dell ECS (versions 3.8.1.0–3.8.1.7) and Dell ObjectScale (versions prior to 4.2.0.0) contain a Use of Default Credentials vulnerability in the OS. A low-privileged, remote attacker could potentially exploit this to achieve Elevation of Privileges. Remediation: upgrade Dell ECS to a newer version ...

CVE-2026-22275

Dell ECS (versions 3.8.1.0–3.8.1.7) and Dell ObjectScale (versions prior to 4.2.0.0) have an Inclusion of Sensitive Information in Source Code vulnerability. A low-privileged attacker with local access could exploit this to expose information. CVSSv3.1 base score 4.4 (AV:L/AC:L/PR:L/UI:N/S:U/C:L/...

CVE-2025-30483

CVE-2025-30483 affects Dell ECS prior to 3.8.1.5 and Dell ObjectScale prior to 4.0.0.0, where an insertion of sensitive information into log files may allow a low-privilege, local attacker to disclose information. The NVD-derived CVSSv3.1 base score is 5.5 (Medium) with LOCAL, LOW complexity, and...

CVE-2025-43992

CVE-2025-43992 affects Dell EMC: Dell ECS versions 3.8.1.0–3.8.1.7 and Dell ObjectScale versions before 4.3.0.0. The issue is an authentication bypass via assumed-immutable data in Geo replication, allowing an unauthenticated attacker with remote access to potentially access data in transit. The ...

CVE-2026-59910

Dell ObjectScale versions prior to 4.3.0.1 contain an OS command injection flaw allowing low-privileged local attackers to escalate privileges. CVSS 7.8 (HIGH) reflects full confidentiality, integrity, and availability impact. No exploitation evidence is provided. Apply the 4.3.0.1 update via Del...

CVE-2025-43936

Dell ObjectScale versions prior to 4.4.0.0 are impacted by an Improper Authentication vulnerability. An unauthenticated attacker with remote access can exploit this flaw to gain Unauthorized access . To remediate this issue, Dell urges users to upgrade to version 4.4.0.0 (or 4.2.0.1 for certain p...

CVE-2026-28261

CVE-2026-28261 affects Dell Elastic Cloud Storage (DE) 3.8.1.7 and earlier and Dell ObjectScale: affected ObjectScale versions prior to 4.1.0.3 and 4.2.0.0. It is a local, low-privilege accessible vulnerability that can cause insertion of sensitive information into log files, potentially exposing...

CVE-2026-26946

CVE-2026-26946 affects Dell EMC ECS (versions 3.8.1.0–3.8.1.7) and Dell ObjectScale (prior to 4.3.0.0). The issue is an improper privilege management vulnerability in the operating system. A high-privileged attacker with local access could potentially exploit this to achieve elevation of privileg...

CVE-2026-56686

Dell ObjectScale, versions prior to 4.3.0.1, is affected by an OS Command Injection flaw (CWE-78) exploitable by a local, low-privileged attacker to achieve privilege escalation. CISA SSVC rates the technical impact as total. No in-the-wild exploitation is currently reported. Patch to version 4.3...

CVE-2026-22271

CVE-2026-22271 affects Dell ECS (versions 3.8.1.0–3.8.1.7) and Dell ObjectScale (versions prior to 4.2.0.0). The issue is cleartext transmission of sensitive information accessible via remote, unauthenticated access, potentially exposing data. Exploitation appears to be network-based with high im...

CVE-2026-22276

CVE-2026-22276 affects Dell ECS (versions 3.8.1.0–3.8.1.7) and Dell ObjectScale (versions before 4.2.0.0). The issue is a Cleartext Storage of Sensitive Information vulnerability that can lead to information disclosure. Exploitation is described as possible by a low-privileged attacker with local...

CVE-2026-59909

Dell ObjectScale versions before 4.3.0.1 have a Path Traversal flaw exploitable by a low-privileged local attacker, enabling information tampering (CVSS 7.1, HIGH). Upgrade to 4.3.0.1 or later; Dell advisory DSA-2026-328 provides details. No exploitation evidence provided.

CVE-2026-56685

Dell ObjectScale versions before 4.3.0.1 are vulnerable to OS Command Injection (CWE-78), exploitable by a low-privileged local attacker to execute arbitrary commands. CISA's SSVC assessment rates technical impact as total. No active exploitation reported; remediation requires upgrading to versio...

CVE-2026-59911

Dell ObjectScale versions prior to 4.3.0.1 have an Insertion of Sensitive Information into Log File flaw in the svc_tools component. A low-privileged, locally authenticated attacker can read sensitive data written to logs, causing information disclosure (CVSS 5.5, medium). No exploitation details...

CVE-2026-56089

Dell ObjectScale (versions prior to 4.3.0.1) has a Path Traversal vulnerability. A low-privileged local attacker can exploit it to read arbitrary files, causing information disclosure . CVSS 3.3 (Low) limits impact to confidentiality only. Dell's DSA-2026-328 advisory documents the fix; upgrading...

CVE-2026-76104

Dell ObjectScale versions prior to 4.4.0.0 contain an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high-privileged attacker with remote access could exploit this flaw to cause Denial of Service . The CVSS 3.1 score is 5.5 (Medium) , reflecting high privileges r...

CVE-2026-56090

Dell ObjectScale versions before 4.3.0.1 have an Uncontrolled Search Path Element flaw exploitable by a low-privileged local attacker to elevate privileges; no exploitation or in-the-wild activity is documented in the provided documents.