VulnSocial

CVE-2025-43936Patch(dell / objectscale)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch dell objectscale systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

dell CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • objectscale

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-09-13); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
dell
Products
objectscale

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-13: 1Mentions · 2026-09-24: 1Patch / Workaround · 2026-09-13: 1Patch / Workaround · 2026-09-24: 1Technical Details · 2026-09-13: 1Technical Details · 2026-09-24: 109-1309-24
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • iototsecnews@iototsecnews
    Patch

    Dell ObjectScale の脆弱性 CVE-2026-70416／43936 などが FIX：RCE の恐れ https://iototsecnews.jp/2026/09/13/critical-dell-objectscale-vulnerabilities-allows-malicious-users-to-compromise-the-affected-system/ Dell ObjectScale および Dell Elastic Cloud Storage (ECS) における深刻な脆弱性を解説する記事です。未認証の第三者による遠隔からの任意のプログラム実行や不正アクセスを許す欠陥が潜んでおり、最悪の場合にはストレージ環境の乗っ取り／データの不正閲覧／設定の改ざん／処理の妨害といった甚大な被害を及ぼす恐れがあります。該当する主な脆弱性は CVE-2026-70416／CVE-2025-43936／CVE-2026-26947／CVE-2025-36591／CVE-2026-76104 です。利用者は、影響を受けない最新バージョンへの更新または適切なアクセス制限の適用といった回避策を迅速に講じることが推奨されます。 #CVE202643936 #CVE202670416 #Dell #ObjectScale #Vulnerability

    Post summary

    The article announces that critical RCE vulnerabilities in Dell ObjectScale and ECS have been fixed, listing five CVEs and strongly urging users to update to patched versions or implement access control workarounds immediately.

    0000086
    515 followersView on X
  • The Daily Tech Feed@dailytechonx
    Patch

    Alert: Dell ObjectScale and ECS platforms suffer a critical RCE vulnerability (CVE-2026-70416) allowing unauthenticated attackers remote code execution. Other serious issues include improper authentication (CVE-2025-43936), broken crypto (CVE-2025-36591), and privilege escalation (CVE-2026-26947). Dell urges upgrading to version 4.4.0.0 or 4.2.0.1 and restricting admin interfaces until patches are applied. #Security #Vulnerability #Dell #ObjectScale #CVE2026 #Cybersecurity https://thedailytechfeed.com/critical-flaws-found-in-dell-objectscale-remote-code-execution-risk/

    Post summary

    The tweet reports multiple Dell vulnerabilities (CVE-2026-70416, CVE-2025-43936, etc.), emphasizes technical details like RCE, and explicitly advises upgrading to patched versions 4.4.0.0 or 4.2.0.1 with interim admin interface restrictions.

    0000097
    727 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appdellobjectscale---

Explore more

Back to dashboarddell CVEsobjectscale vulnerabilities