Dell ObjectScale Security Advisory DSA-2026-328: Multiple OS Command Injection & Path Traversal Vulnerabilities

Vulnerability Overview The multiple proprietary code vulnerabilities in Dell ObjectScale (DSA-2026-328) involve several CVE identifiers, specifically: 1. CVE-2026-56686: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability, with a CVSS Base Score of 7.8. 2. CVE-2026-59910: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability, with a CVSS Base Score of 7.8. 3. CVE-2026-56685: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability, with a CVSS Base Score of 7.3. 4. CVE-2026-56090: Uncontrolled Search Path Element vulnerability, with a CVSS Base Score of 7.3. 5. CVE-2026-59909: Path Traversal vulnerability, with a CVSS Base Score of 7.1. 6. CVE-2026-59911: Insertion of Sensitive Information into Log File vulnerability, with a CVSS Base Score of 5.5. 7. CVE-2026-56089: Path Traversal vulnerability, with a CVSS Base Score of 3.3. Scope of Impact Affected Product: Dell ObjectScale Affected Versions: Versions prior to 4.3.0.1 Remediation Fixed Version: 4.3.0.1 or later Steps: 1. Customers can request an upgrade to their ObjectScale system through the “Operating Environment Upgrade” service. 2. Customers are advised to upgrade to version 4.3.0.1 or later as soon as possible. 3. For more information, please visit Security Update Release Schedule for Supported Versions of ObjectScale (formerly ECS). Additional Information CVSS Score Description: Dell Technologies advises customers to consider both the CVSS Base Score and the associated Temporal and Environmental Scores to assess the potential severity of specific security vulnerabilities. Revision History: - Revision: 1.0 - Date: 2026-08-17 - Description: Initial Release Related Links Dell Security Advisories and Notices Dell Vulnerability Response Policy CVSS Scoring Guide Legal Disclaimer Dell Technologies’ security advisories are intended to help avoid potential issues but do not guarantee that all risks are covered. Customers should assess risks based on their own environments and take appropriate measures. Dell Technologies assumes no liability for any direct or indirect losses arising from the use of this information. Affected Products ObjectScale Software with Encryption ObjectScale Software without Encryption ObjectScale Software Series Provide Feedback Customers can rate the article (accurate, useful, easy to understand) and provide additional information. --- The above is a summary of the key vulnerability information from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

Dell ObjectScale Security Advisory DSA-2026-328: Multiple OS Command Injection & Path Traversal Vulnerabilities

More from this source