CVE-2026-70422: SQL Injection

Q: Which installations should be prioritized for remediation?

Dell OpenManage Enterprise installations running versions earlier than 4.7.0 should be remediated, particularly where low-privileged remote users can access the product.

Q: What level of access does an attacker need to exploit this issue?

An attacker needs remote access and low-privileged access to Dell OpenManage Enterprise. No user interaction is required.

Q: What is the potential impact of successful exploitation?

Successful exploitation could lead to script injection. The vulnerability is also associated with high confidentiality and availability impact in the provided severity vector.

Published Aug 19, 2026

Updated

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Affected Software

1 affected component

Dell OpenManage Enterprise<4.7.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Dell OpenManage Enterprise to a version that resolves this vulnerability.
Fixed in 4.7.0

Event History

Aug 19, 2026

CVE Published

via MITRE·01:57 PM

Data Sourced

via MITRE·01:57 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations should be prioritized for remediation?

Dell OpenManage Enterprise installations running versions earlier than 4.7.0 should be remediated, particularly where low-privileged remote users can access the product.

What level of access does an attacker need to exploit this issue?

An attacker needs remote access and low-privileged access to Dell OpenManage Enterprise. No user interaction is required.

What is the potential impact of successful exploitation?

Successful exploitation could lead to script injection. The vulnerability is also associated with high confidentiality and availability impact in the provided severity vector.

CVE-2026-70422: SQL Injection

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installations should be prioritized for remediation?

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which installations should be prioritized for remediation?

What level of access does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?