CVE-2026-70416

Katalog CVE

CVSS 9.8 · Critical EPSS 0,85%

Kerentanan Deserialization of Untrusted Data pada dell objectscale. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Rincian

Terbit di NVD

16 September 2026

Terakhir diubah

21 September 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 57,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/en-in/000505935/dsa-2026-393-security-update-for-dell-objectscale-multiple-... advisory vendor