SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-70419

CRITICAL · CVSS 9.1 EPSS 2.19% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

Dell Cloud Disaster Recovery versions 20.2 and earlier are vulnerable to an OS command injection flaw that allows high-privileged attackers with remote access to execute arbitrary commands on the system. This critical vulnerability poses a significant risk to the integrity and confidentiality of affected environments. Organizations using these versions should prioritize immediate remediation to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-70419
Severity
CRITICAL
CVSS
9.1
EPSS
2.19%

Original NVD Description

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)