CVE WatchAug 19, 2026

CVE-2026-56089

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could po

CVSS

3.3

Low

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Aug 17, 2026 · Last modified: Aug 19, 2026 · CWE-35

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-08-182026-08-30

Technical description

Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Official references

www.dell.comhttps://www.dell.com/support/kbdoc/en-us/000500724/dsa-2026-328-security-update-for-dell-objectscale-multiple-proprietary-code-vulnerabilities

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-599097.1 HIG

1.9%

——1Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.12d CVE-2026-281577.5 HIG

29.9%

——9Subscriber Path Traversal in Do Lasso <= 358 versions.17d CVE-2026-691097.5 HIG

38.9%

——12A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application.3d CVE-2026-137169.1 CRI

51.8%

——16Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.13d CVE-2026-591159.9 CRI

53.0%

——16'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.23d CVE-2026-666956.5 MED

18.0%

——5Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.18d