CVE-2026-71172: SSRF
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker with low-privileged access to Dell Cloud Disaster Recovery could potentially exploit it. The supplied data does not indicate that unauthenticated attackers can do so.
Which deployments are affected?
Dell Cloud Disaster Recovery version 20.2 and prior are affected. The provided information does not state whether the vulnerable functionality is enabled in a default configuration.
What is the impact of successful exploitation?
Successful exploitation could allow server-side request forgery, causing the server to make requests on an attacker’s behalf. The reported impact is limited to confidentiality, with no stated integrity or availability impact.