CVE Catalog

CVE-2026-56090

HighCVSS 7.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.13%

3th percentile - higher than 3% of all known CVEs

Summary

Dell ObjectScale versions prior to 4.3.0.1 contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.

Risk Assessment

A local attacker can manipulate the search path, potentially leading to execution of malicious code with elevated privileges.

Recommendation

Update Dell ObjectScale to version 4.3.0.1 or later if available, and restrict local access to the system.

Original NVD description (English source)

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS