CVE-2026-76104
MediumCVSS 5.5Summary
Dell ObjectScale versions prior to 4.4.0.0 contain an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Risk Assessment
This may lead to service availability disruption (denial of service) by a high-privileged attacker with remote access. However, it requires high privileges on the attacker's side.
Recommendation
Update Dell ObjectScale to version 4.4.0.0 or later, which contains the fix for this issue.
Other vulnerabilities in Dell ObjectScale
See all- CVE-2025-43936High
Dell ObjectScale prior to 4.4.0.0 has an improper authentication vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
- CVE-2026-70416Critical
Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote code execution.
- CVE-2026-59911Medium
Dell ObjectScale versions prior to 4.3.0.1 contain an insertion of sensitive information into log file vulnerability in svc_tools. A low privileged attacker with local access could exploit this to disclose information.
- CVE-2026-59910High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-59909High
Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could exploit this to tamper with information.
- CVE-2026-56686High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-56685High
Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to execute commands.
- CVE-2026-56090High
Dell ObjectScale versions prior to 4.3.0.1 contain an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could exploit this to elevate privileges.
- CVE-2026-56089Low
Dell ObjectScale versions prior to 4.3.0.1 contain a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Original NVD description (English source)
Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.