CVE-2026-70419

CriticalCVSS 9.1

Published: 26/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Summary

Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability. A high privileged attacker with remote access could exploit this to execute commands.

Risk Assessment

A high-privileged attacker can execute arbitrary commands on the server, potentially leading to full system compromise and data breach.

Recommendation

Upgrade Dell Cloud Disaster Recovery to a version newer than 20.2 and restrict remote access.

Original NVD description (English source)

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.