Approved changes feed: RSS · Atom

cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductObjectscale (293a16e8-d8ca-5266-998f-765aa7c5bba5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-70416 vulnerable 2026-10-13 12:28:47.927964 Details available
CRITICAL (10)
Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Published: 2026-09-16T15:19:47.373Z
Updated: 2026-09-16T17:38:01.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76104 vulnerable 2026-10-13 12:28:36.576451 Details available
MEDIUM (5.5)
Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Published: 2026-09-16T15:13:55.138Z
Updated: 2026-09-16T18:35:21.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43936 vulnerable 2026-10-13 12:22:21.741687 Details available
HIGH (8.1)
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Published: 2026-09-16T15:04:33.896Z
Updated: 2026-09-17T03:57:05.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40636 vulnerable 2026-06-08 08:01:20.901897 Details available
CRITICAL (9.8)
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.
Published: 2026-05-11T08:57:19.112Z
Updated: 2026-05-12T03:55:17.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-35157 vulnerable 2026-06-08 07:59:13.658466 Details available
MEDIUM (5.8)
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
Published: 2026-05-11T09:33:28.472Z
Updated: 2026-05-12T19:49:11.038Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28261 vulnerable 2026-06-08 07:55:15.077708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26946 vulnerable 2026-06-08 07:53:21.763697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22276 vulnerable 2026-06-08 07:49:17.800254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22275 vulnerable 2026-06-08 07:49:17.799887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22274 vulnerable 2026-06-08 07:49:17.799490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22273 vulnerable 2026-06-08 07:49:17.799183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-22271 vulnerable 2026-06-08 07:49:17.798105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43992 vulnerable 2026-06-08 07:25:10.529251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30483 vulnerable 2026-06-08 07:17:00.490359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26478 vulnerable 2026-06-08 07:12:51.693918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26477 vulnerable 2026-06-08 07:12:51.693588 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26476 vulnerable 2026-06-08 07:12:51.687113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.