OS Command Injection Vulnerability in Dell ObjectScale
CVE-2026-59910

7.8HIGH

Key Information:

Vendor

Dell
Status
Objectscale
Vendor
CVE Published:
17 August 2026

What is CVE-2026-59910?

Dell ObjectScale, in versions prior to 4.3.0.1, is susceptible to an OS Command Injection vulnerability due to improper neutralization of special elements. This issue could allow a low-privileged attacker with local access to potentially execute commands at a higher privilege level, resulting in unauthorized actions within the affected system.

Affected Version(s)

ObjectScale 0 < 4.3.0.1 or later

References

https://www.dell.com/support/kbdoc/en-us/000500724/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.