CVE-2026-59910
Last modified
CVE-2026-59910 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Objectscale | < 4.3.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-59910?
How severe is CVE-2026-59910?
How do I fix CVE-2026-59910?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-59900Netty is an asynchronous, event-driven network application f…5.3
- CVE-2026-59901Netty is an asynchronous, event-driven network application f…7.5
- CVE-2026-59902Netty is an asynchronous, event-driven network application f…7.5
- CVE-2026-59903Netty is an asynchronous, event-driven network application f…7.5
- CVE-2026-59909Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Pa…7.1
- CVE-2026-5991A vulnerability was found in Tenda F451 1.0.0.7. Affected by…8.8
- CVE-2026-59911Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an I…5.5
- CVE-2026-59912Dell Display and Peripheral Manager (DDPM Mac), versions pri…7.8
- CVE-2026-59913Dell Display and Peripheral Manager (DDPM Mac), versions pri…7.8
- CVE-2026-59914Dell Display and Peripheral Manager (DDPM Windows), versions…7.8
- CVE-2026-59915Dell Alienware Command Center (AWCC), versions prior to 6.14…7.3
- CVE-2026-59916Dell Display and Peripheral Manager (DDPM Windows), versions…7.8
Are you affected by CVE-2026-59910?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST