CVE-2026-59911
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Dell ObjectScale versions prior to 4.3.0.1 contain an insertion of sensitive information into log file vulnerability in svc_tools. A low privileged attacker with local access could exploit this to disclose information.
Risk Assessment
Risk of sensitive organizational data being exposed through system logs, potentially compromising confidentiality.
Recommendation
Upgrade Dell ObjectScale to version 4.3.0.1 or later and restrict local access to the system.
Other vulnerabilities in Dell ObjectScale
See all- CVE-2026-70416Critical
Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote code execution.
- CVE-2026-76104Medium
Dell ObjectScale versions prior to 4.4.0.0 contain an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
- CVE-2025-43936High
Dell ObjectScale prior to 4.4.0.0 has an improper authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
- CVE-2026-59910High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-59909High
Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could exploit this to tamper with information.
- CVE-2026-56686High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-56685High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to execute commands.
- CVE-2026-56090High
Dell ObjectScale versions prior to 4.3.0.1 contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-56089Low
Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Original NVD description (English source)
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

