Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-70419 EUVD-2026-66656GHSA-p7qv-h32g-j27p

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Co…

Published Aug 26, 2026 · Updated Aug 26, 2026 · Assigned by dell

Description

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected products

VendorProductAffectedFixed
Dell Cloud Disaster Recovery < CDR 20.3 CDR 20.3

References