CVE-2026-35157mediumCWE-1236

CVE-2026-35157: medium-severity vulnerability in Dell ECS

Published · Updated

Follow this CVE+ Monitor ObjectScale+ Monitor ECS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.8epss 0.3%
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
Dell · ECSDell · ObjectScale
Related CVEs — Dell ECS

In the same product, most dangerous first.

CVE-2026-70416CRITICALCVE-2026-70416EPSS 0.8%CVE-2026-56685HIGHCVE-2026-56685EPSS 0.7%CVE-2026-59910HIGHCVE-2026-59910EPSS 0.6%CVE-2026-56686HIGHCVE-2026-56686EPSS 0.6%CVE-2025-43936HIGHCVE-2025-43936EPSS 0.5%CVE-2024-22459MEDIUMCVE-2024-22459EPSS 0.5%