{"id":"CVE-2025-43936","published":"2026-09-16T16:17:02.877","lastModified":"2026-09-21T17:31:09.390","description":"Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287"],"vendors":["dell"],"products":["objectscale"],"references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000505935/dsa-2026-393-security-update-for-dell-objectscale-multiple-vulnerabilities","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is an Improper Authentication vulnerability in Dell ObjectScale versions prior to 4.4.0.0, allowing unauthenticated attackers to gain unauthorized access. This matters because it can lead to significant data breaches and unauthorized system control.","exploitability":"Exploitation is relatively straightforward with remote access, requiring no specific user interaction other than establishing a connection to the affected ObjectScale instance.","blast_radius":"If exploited, this vulnerability could result in unauthorized access to sensitive data and control over the affected ObjectScale system, potentially leading to data theft or system compromise.","remediation":"Upgrade to ObjectScale 4.4.0.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","remote","data-breach"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-05T08:45:26.309Z"}}