CVE-2026-56685

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote code execution.

Dell ObjectScale versions prior to 4.4.0.0 contain an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Dell ObjectScale prior to 4.4.0.0 has an improper authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.

Dell ObjectScale versions prior to 4.3.0.1 contain an insertion of sensitive information into log file vulnerability in svc_tools. A low privileged attacker with local access could exploit this to disclose information.

Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.

Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could exploit this to tamper with information.

Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.

Dell ObjectScale versions prior to 4.3.0.1 contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.

Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.