CVE-2025-43936: dell objectscale

CVSS 9.1 (critical) · published 2026-09-16

Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected products (NVD): dell objectscale

Fixed in (NVD): 4.4.0.0

Weakness: CWE-287

Source: NVD CVE-2025-43936

References

• https://www.dell.com/support/kbdoc/en-in/000505935/dsa-2026-393-security-update-for-dell-objectscale-multiple-vulnerabilities

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.