CVE-2026-56090CWE-427

CVE-2026-56090

High · published August 17, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-08-17T18:20Z
Affected products (1)
ProductVersionsFixed in
dell/objectscale< 4.3.0.14.3.0.1
References (1)
https://www.dell.com/support/kbdoc/en-us/000500724/dsa-2026-328-security-update-for-dell-objectscale-multiple-proprietary-code-vulnerabilities · [email protected]
EPSS history
Timeline
  • 17 AUG 13:44Z
    Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability
    cvelistv5