← Vulnerability database

CVE-2025-43936

Critical
9.1 CVSS v3.1
Published
Sep 16, 2026
Updated
Oct 14, 2026
Vendor
Dell
Affected versions
See affected products
Weakness
CWE-287

Summary

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Severity

Critical (9.1)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

  • Dell Objectscale < 4.4.0.0

Exploitation status

Unknown

Technical details

Technical analysis has not been written for this record yet.

Mitigation & remediation

Follow the vendor advisory linked below for patches and workarounds.

References

Source NIST NVD
Last syncedOct 28, 2026 19:44 UTC
Reviewed Oct 28, 2026
Page updatedOct 29, 2026