CVE-2025-43936
HighCVSS 8.1Summary
Dell ObjectScale prior to 4.4.0.0 has an improper authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
Risk Assessment
Risk of unauthorized access to the system and data, potentially compromising confidentiality and integrity.
Recommendation
Upgrade Dell ObjectScale to version 4.4.0.0 or later to mitigate the vulnerability.
Other vulnerabilities in Dell ObjectScale
See all- CVE-2026-76104Medium
Dell ObjectScale versions prior to 4.4.0.0 contain an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2026-70416Critical
Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote code execution.
- CVE-2026-59911Medium
Dell ObjectScale versions prior to 4.3.0.1 contain an insertion of sensitive information into log file vulnerability in svc_tools. A low privileged attacker with local access could exploit this to disclose information.
- CVE-2026-59910High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-59909High
Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could exploit this to tamper with information.
- CVE-2026-56686High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-56685High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to execute commands.
- CVE-2026-56090High
Dell ObjectScale versions prior to 4.3.0.1 contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-56089Low
Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Original NVD description (English source)
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.