CVE-2026-56686
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dell | ObjectScale | < 4.3.0.1 or later | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56686
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | ObjectScale | 0 ~ 4.3.0.1 or later | - |
II. Public POCs for CVE-2026-56686
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56686
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-56686 (1)
Same Patch Batch · Dell · 2026-08-17 · 8 CVEs total
| CVE-2026-59910 | 7.8 HIGH | Dell ObjectScale命令注入导致提权漏洞 |
| CVE-2026-56090 | 7.3 HIGH | Dell ObjectScale <4.3.0.1 特权提升漏洞 |
| CVE-2026-56685 | 7.3 HIGH | Dell ObjectScale<4.3.0.1命令注入漏洞 |
| CVE-2026-59909 | 7.1 HIGH | Dell ObjectScale<4.3.0.1路径遍历致信息篡改 |
| CVE-2026-59911 | 5.5 MEDIUM | Dell ObjectScale <4.3.0.1 日志注入致信息泄露 |
| CVE-2026-70412 | 3.5 LOW | Dell iDRAC内存擦除后残留数据读取漏洞 |
| CVE-2026-56089 | 3.3 LOW | Dell ObjectScale<4.3.0.1路径遍历致信息泄露 |
IV. Related Vulnerabilities
Same weakness: CWE-78
- CVE-2026-71858
Notepad++: shortcuts.xml Macro HMAC Bypass Enables Condition - CVE-2026-71472
Acm-search-v2-rhel9: search-v2-operator: shell-command and s - CVE-2026-68519
Glances: `--disable-config-exec` does not cover on-alert act - CVE-2026-62982
Glances: Incomplete fix of CVE-2026-32608: action-template s - CVE-2026-68518
Glances: Command injection bypass of action-template sanitiz
V. Comments for CVE-2026-56686
No comments yet