Dell Cloud Disaster Recovery vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell Cloud Disaster Recovery: 4 record(s), with affected versions and fixes.cpe:2.3:a:dell:cloud_disaster_recovery
CVE-2026-71172
Medium · 4.3
CWE-918 Aug 26, 2026
Server-Side Request Forgery (SSRF) in Dell Cloud Disaster Recovery
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
CVE-2026-71171
High · 7.2
CWE-78 Aug 26, 2026
OS Command Injection in Dell Cloud Disaster Recovery
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
CVE-2026-70419
Critical · 9.1
CWE-78 Aug 26, 2026
OS Command Injection in Dell Cloud Disaster Recovery
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVE-2025-43943
Medium · 6.7
CWE-78 Sep 25, 2025
OS Command Injection in Dell Cloud Disaster Recovery
Dell Cloud Disaster Recovery, version(s) prior to 19.20, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.