Threat Intelligence Database

Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability in the OS. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Dell ObjectScale versions prior to 4.4.0.0 contain an improper authentication vulnerability (CWE-287). This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access to the system. The vulnerability is rated high severity with a CVSS score of 8.1, indicating significant impact on confidentiality, integrity, and availability.

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Insertion of Sensitive Information into Log File vulnerability in the svc_tools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Dell ObjectScale versions prior to 4.3.0.1 have a path traversal vulnerability (CWE-35) that allows a low privileged local attacker to tamper with information. This vulnerability does not impact confidentiality but can affect integrity and availability. The vulnerability is rated high severity with a CVSS score of 7.1.

Dell ObjectScale versions prior to 4.3.0.1 contain an Uncontrolled Search Path Element vulnerability (CWE-427). This flaw allows a low privileged local attacker to potentially escalate privileges. The vulnerability has a high severity rating with a CVSS score of 7.3. No official patch links are provided in the data, and it is not a cloud service, so remediation depends on vendor updates.

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.

CVE-2026-22276 is a medium severity vulnerability affecting Dell ObjectScale and Dell ECS versions prior to 4.2.0.0 and 3.8.1.8 respectively. It involves the cleartext storage of sensitive information, allowing a low-privileged local attacker to potentially disclose confidential data without requiring user interaction. The vulnerability does not impact integrity or availability but poses a confidentiality risk. Exploitation requires local access and low privileges, limiting remote attack feasibility.

MediumVulnerabilityGermanyFranceNetherlands+7#cve#cve-2026-22276#cwe-312

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated attacker with remote access could potentially exploit this vulnerability to intercept and modify information in transit.

MediumVulnerabilityGermanyUnited KingdomFrance+3#cve#cve-2026-22274#cwe-319