Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-71171 OS Command Injection in Dell Cloud Disaster Recovery REST API https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-71171
Post summary
Dell's Cloud Disaster Recovery REST API is susceptible to OS command injection (CVE-2026-71171); no further exploitation or mitigation details are provided.
🚨*CVE* CVE-2026-71171 Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi… https://www.cve.org/CVERecord?id=CVE-2026-71171 ----- Traducción: CVE-2026-71171 Del… https://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑71171, noting an OS command injection flaw in Dell Cloud Disaster Recovery 20.2 and earlier, but offers no PoC, exploit, patch, or active exploitation details.
CVE-2026-71171 Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi… https://www.cve.org/CVERecord?id=CVE-2026-71171
Post summary
Announces CVE-2026-71171, an OS command injection vulnerability in Dell Cloud Disaster Recovery 20.2 and earlier, with a link to the CVE record.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dell | cloud_disaster_recovery | - | - | - |