Deserialization of Untrusted Data in Dell ObjectScale
CVE-2026-70416

10CRITICAL

Key Information:

Vendor

Dell
Status
Objectscale
Vendor
CVE Published:
16 September 2026

What is CVE-2026-70416?

Dell ObjectScale, in its versions before 4.4.0.0, is affected by a vulnerability that allows for deserialization of untrusted data. An unauthenticated attacker with remote access could exploit this flaw, which may lead to remote code execution on the affected systems. It is crucial for users to update to the latest version to safeguard against potential exploits.

Affected Version(s)

ObjectScale 0 < 4.4.0.0 or later

References

https://www.dell.com/support/kbdoc/en-in/000505935/dsa-20...
vendor-advisory

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank WinD39 - Huynh Dinh Vu for reporting this issue.
.