CVE-2026-70419Disclosure(dell / cloud_disaster_recovery)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch dell cloud_disaster_recovery systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

dell CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.dell.com/support/kbdoc/en-us/000500898/dsa-2026-353-security-update-for-cloud-disaster-recovery-vulnerabilities

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

cloud_disaster_recovery

Threat summary

Patch or workaround signal is available
7 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 5 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 2d ago at 3 mentions (2026-08-26); latest day: 1
7 total mentions across 3 days

Affected systems

Vendors

dell

Products

cloud_disaster_recovery

Deep dive

Activity timeline7 mentions / 3d

Signal classification3 categories

Disclosure

457.1%

Patch

228.6%

General

114.3%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-26	3	Disclosure3
2026-08-27	3	Disclosure1General1Patch1
2026-08-28	1	Patch1

Full discourse7 posts

Daily CyberSecurity@Daily_CyberSec46d
Patch
Dell patched 5 Cloud Disaster Recovery flaws. The top bug, CVE-2026-70419 (CVSS 9.1), allows command execution. Update to CDR 20.3 now. #Dell #CyberSecurity #CVE202670419 #CommandInjection #Infosec https://securityonline.info/dell-cloud-disaster-recovery-vulnerabilities/ https://t.co/4acaUsqyYZ
Post summary
Dell has issued a patch for CVE-2026-70419, a high‑severity command execution flaw in Cloud Disaster Recovery, and recommends updating to version 20.3.
01030450
13.0K followersView on X
CCB Alert@CCBalert44d
Patch
Warning: Critical OS command injection vulnerability in #Dell Cloud Disaster Recovery. CVE-2026-70419 CVSS: 9.1. Attackers with high privileges could potentially perform command execution #Patch #Patch #Patch
Post summary
The post warns about a critical OS command injection vulnerability (CVE-2026-70419) in Dell Cloud Disaster Recovery and emphasizes the need to apply a patch to mitigate potential command execution.
00000311
7.2K followersView on X
Cybersecurity News DE@cybsecuritynews45d
Disclosure
#cloudsecurity #schwachstellen CVE-2026-70419 in Dell Cloud Disaster Recovery: Kritische Command-Injection in Version 20.2 und älter #cve202670419 #dellclouddisasterrecovery #oscommandinjection #remotecodeexecution https://cybersecurity-news.de/cve-2026-70419-dell-cloud-disaster-recovery-command-injection
Post summary
The tweet discloses a critical command injection vulnerability (CVE‑2026‑70419) affecting Dell Cloud Disaster Recovery up to version 20.2, but does not provide a PoC, exploit code, patch, or evidence of active exploitation.
0000027
10 followersView on X
VulDB 🛡@vuldb45d
General
There is a new vulnerability with elevated criticality in Dell Cloud Disaster Recovery (CVE-2026-70419) https://vuldb.com/vuln/395931
Post summary
The post announces a newly discovered critical vulnerability (CVE-2026-70419) in Dell Cloud Disaster Recovery, providing a link to a vulnerability database for additional information.
00000105
2.3K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-70419 OS Command Injection in Dell Cloud Disaster Recovery Versions 20.2 and Prior https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-70419
Post summary
Dell Cloud Disaster Recovery versions 20.2 and earlier suffer from an OS Command Injection vulnerability identified as CVE-2026-70419.
00000100
4.1K followersView on X
Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-70419 Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi… https://www.cve.org/CVERecord?id=CVE-2026-70419 ----- Traducción: CVE-2026-70419 Del… https://infoflow.cloud`
Post summary
The post links to the CVE-2026-70419 record and summarizes that Dell Cloud Disaster Recovery is vulnerable to OS command injection; it provides no PoC, exploit, patch information, or evidence of active exploitation.
0000025
102 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-70419 Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi… https://www.cve.org/CVERecord?id=CVE-2026-70419
Post summary
The CVE-2026-70419 disclosure notes that Dell Cloud Disaster Recovery versions 20.2 and earlier have an OS Command Injection vulnerability caused by improper neutralization of special elements, but it includes no PoC, exploit code, active attack evidence, or patch information.
000001.4K
58.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	dell	cloud_disaster_recovery	-	-	-

Explore more

Back to dashboard dell CVEs cloud_disaster_recovery vulnerabilities

What researchers are saying

CVE-2026-70419

Daily CyberSecurity@Daily_CyberSecPatch

Dell has issued a patch for CVE-2026-70419, a high‑severity command execution flaw in Cloud Disaster Recovery, and recommends updating to version 20.3.

CCB Alert@CCBalertPatch

The post warns about a critical OS command injection vulnerability (CVE-2026-70419) in Dell Cloud Disaster Recovery and emphasizes the need to apply a patch to mitigate potential command execution.

Cybersecurity News DE@cybsecuritynewsDisclosure

The tweet discloses a critical command injection vulnerability (CVE‑2026‑70419) affecting Dell Cloud Disaster Recovery up to version 20.2, but does not provide a PoC, exploit code, patch, or evidence of active exploitation.

VulDB 🛡@vuldbGeneral

The post announces a newly discovered critical vulnerability (CVE-2026-70419) in Dell Cloud Disaster Recovery, providing a link to a vulnerability database for additional information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

Dell Cloud Disaster Recovery versions 20.2 and earlier suffer from an OS Command Injection vulnerability identified as CVE-2026-70419.

Infoflowcloud@infoflowcloudDisclosure

The post links to the CVE-2026-70419 record and summarizes that Dell Cloud Disaster Recovery is vulnerable to OS command injection; it provides no PoC, exploit, patch information, or evidence of active exploitation.

CVE@CVEnewDisclosure

The CVE-2026-70419 disclosure notes that Dell Cloud Disaster Recovery versions 20.2 and earlier have an OS Command Injection vulnerability caused by improper neutralization of special elements, but it includes no PoC, exploit code, active attack evidence, or patch information.