medium5.8
CVE-2026-35157
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File…
Impact
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Elastic Cloud Storage | from 3.8.1.0 before 4.3.0.0 |
| Dell | Objectscale | before 4.3.0.0 |