CVE-2026-70423: XEE

Q: Which deployments are exposed?

Dell OpenManage Enterprise versions prior to 4.7.0 are affected. Exploitation requires remote access to the product.

Q: What level of access does an attacker need?

The attacker must already have low-privileged access. No user interaction is required.

Q: What is the impact if exploited?

Successful exploitation could expose information. The provided data does not indicate integrity or availability impact.

Published Aug 19, 2026

Updated

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Affected Software

1 affected component

Dell OpenManage Enterprise<4.7.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Dell OpenManage Enterprise to a version that resolves this vulnerability.
Fixed in 4.7.0

Event History

Aug 19, 2026

CVE Published

via MITRE·01:53 PM

Data Sourced

via MITRE·01:53 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Dell OpenManage Enterprise versions prior to 4.7.0 are affected. Exploitation requires remote access to the product.

What level of access does an attacker need?

The attacker must already have low-privileged access. No user interaction is required.

What is the impact if exploited?

Successful exploitation could expose information. The provided data does not indicate integrity or availability impact.

CVE-2026-70423: XEE

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are exposed?

What level of access does an attacker need?

What is the impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What level of access does an attacker need?

What is the impact if exploited?