AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-70422

Dell Technologies OpenManage Enterprise: SQL injection

Dell Technologies

CVE-2026-70422 · Published Aug 19, 2026 · updated Aug 21, 2026

High8.1
Fix: upgrade to 4.7.0 or later or later
Dell Technologies advisory

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected versions

PackageAffectedFixed in
OpenManage Enterprise
Product
< 4.7.0 or later4.7.0 or later
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-89

More Dell Technologies advisories

All Dell Technologies
High 8.8Aug 19Dell Technologies OpenManage Enterprise: SQL injectionCVE-2026-71176fixed in 4.7.0 or laterMedium 5.5Aug 19Dell Command Update (DCU): improper authorizationCVE-2026-67266fixed in 5.7.1Medium 5.5Aug 19Dell Command Update (DCU): information disclosureCVE-2026-67267fixed in 5.7.1Medium 6.5Aug 19Dell Command Update (DCU): XML external entityCVE-2026-67268fixed in 5.7.1High 8.8Aug 19Dell Command Update (DCU): missing authorizationCVE-2026-58565fixed in 5.7.1High 7.3Aug 19Dell Command Update (DCU): missing authorizationCVE-2026-58562fixed in 5.7.1