Critical Alert 6 Active Exploits Detected Today

CVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability →
CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability →
CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability →
CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability →
CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability →
CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability →
Powered by CVE Watchtower
×
August 27, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-71171NVD

Vulnerability Summary

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Severity Level
HIGH(7.2)
Published Date
Aug 26, 2026
Last Modified
Aug 26, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh