CVE-2026-70419
CriticalCVSS 9.1Exploitation Probability (EPSS)
High risk81th percentile - higher than 81% of all known CVEs
Summary
Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability. A high privileged attacker with remote access could exploit this to execute commands.
Risk Assessment
A high-privileged attacker can execute arbitrary commands on the server, potentially leading to full system compromise and data breach.
Recommendation
Upgrade Dell Cloud Disaster Recovery to a version newer than 20.2 and restrict remote access.
Other vulnerabilities in Dell Cloud Disaster Recovery
See all- CVE-2026-71172Medium
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
- CVE-2026-71171High
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Original NVD description (English source)
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS