Approved changes feed: RSS · Atom

cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductObjectscale (293a16e8-d8ca-5266-998f-765aa7c5bba5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40636 vulnerable 2026-06-08 08:01:20.901897 Details available
CRITICAL (9.8)
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.
Published: 2026-05-11T08:57:19.112Z
Updated: 2026-05-12T03:55:17.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-35157 vulnerable 2026-06-08 07:59:13.658466 Details available
MEDIUM (5.8)
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
Published: 2026-05-11T09:33:28.472Z
Updated: 2026-05-12T19:49:11.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28261 vulnerable 2026-06-08 07:55:15.077708 Details available
HIGH (7.8)
Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to secret exposure. The attacker may be able to use the exposed secret to access the vulnerable system with privileges of the compromised account.
Published: 2026-04-08T12:43:54.291Z
Updated: 2026-04-09T03:55:55.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26946 vulnerable 2026-06-08 07:53:21.763697 Details available
MEDIUM (6.7)
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Published: 2026-05-11T09:39:22.177Z
Updated: 2026-05-12T03:55:14.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22276 vulnerable 2026-06-08 07:49:17.800254 Details available
MEDIUM (5.5)
Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Published: 2026-01-23T09:42:46.521Z
Updated: 2026-01-23T15:14:02.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22275 vulnerable 2026-06-08 07:49:17.799887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22274 vulnerable 2026-06-08 07:49:17.799490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22273 vulnerable 2026-06-08 07:49:17.799183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22271 vulnerable 2026-06-08 07:49:17.798105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43992 vulnerable 2026-06-08 07:25:10.529251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30483 vulnerable 2026-06-08 07:17:00.490359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26478 vulnerable 2026-06-08 07:12:51.693918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26477 vulnerable 2026-06-08 07:12:51.693588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26476 vulnerable 2026-06-08 07:12:51.687113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.