Dell Technologies unveiled a security alert regarding multiple vulnerabilities impacting Dell ObjectScale and Elastic Cloud Storage (ECS) installations. This alert includes a critical remote code execution flaw that could enable an unauthenticated attacker to compromise vulnerable systems. Successful exploitation could give an attacker control over the ObjectScale environment, allowing access to data, altering configurations, disrupting storage operations, deploying malicious payloads, or establishing persistence in the affected infrastructure.
Dell ObjectScale provides enterprise-scale object storage, making a compromise significant for organizations storing backups, application data, archives, or cloud-native workloads on the platform. Despite its high attack complexity, the vulnerability does not necessitate credentials or user interaction, thereby emphasizing the importance of minimizing network exposure during updates.
Two additional flaws impact both Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions earlier than 4.4.0.0. These include CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-34743, CVE-2026-31694, and CVE-2026-43499. Until updates are applied, Dell recommends using Secure Service-Level Communication guidance from the official Security Configuration Guide to mitigate CVE-2025-43936.
Security teams should restrict administrative and storage-management interfaces to trusted networks, review exposed ObjectScale services, monitor for abnormal authentication activity, and investigate unexpected configuration or permission changes. Download the free AI SOC Deployment Playbook 2026, featuring 7 Metric-Gated AI SOC Deployment Phases.
