CVE-2026-56685

HighCVSS 7.3

Published: 17/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

39th percentile - higher than 39% of all known CVEs

Summary

Dell ObjectScale versions prior to 4.3.0.1 contain an OS Command Injection vulnerability. A low privileged attacker with local access could exploit this to execute commands.

Risk Assessment

A local attacker can execute arbitrary commands on the system, potentially leading to unauthorized actions and security compromise.

Recommendation

Update Dell ObjectScale to version 4.3.0.1 or later if available, and restrict local access to the system.

Original NVD description (English source)

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution.