CVE-2026-56089
Received Received - Intake

Path Traversal in Dell ObjectScale

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: Dell

Description
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-56089
EUVD
EUVD-2026-60204

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell objectscale to 4.3.0.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-35 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell ObjectScale versions before 4.3.0.1 have a Path Traversal vulnerability. This allows a low-privileged attacker with local access to read sensitive files on the system, potentially exposing confidential information.

Detection Guidance

Detection requires checking Dell ObjectScale versions prior to 4.3.0.1. Verify installed version via system commands like 'rpm -qa | grep objectscale' or 'dpkg -l | grep objectscale' depending on your package manager.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive data stored on the affected system, compromising confidentiality of information.

Compliance Impact

This vulnerability could result in unauthorized data exposure, potentially violating compliance requirements such as GDPR or HIPAA, which mandate strict protection of personal and health information.

Mitigation Strategies

Upgrade Dell ObjectScale to version 4.3.0.1 or later immediately. Apply vendor patches if available. Restrict local access to trusted users only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56089. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart