Vulnerability intelligence

CVE-2026-70419

Dell Cloud Disaster Recovery CWE-78

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

CVSS Score

9.1

Critical

EPSS — Exploit Probability

2.0%

Riskier than 80% of all CVEs · checked 2026-10-11

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published