CVE-2026-70422 is a high severity (CVSS 8.1) SQL injection in Dell OpenManage Enterprise versions before 4.7.0. A low privileged remote attacker could exploit it, and the record says the result could be script injection. The fix is to upgrade to 4.7.0 or later, as stated in the record.
What's affected
Dell OpenManage Enterprise versions prior to 4.7.0, per the record. Version 4.7.0 is the first release the record treats as not affected. I could not fetch Dell's advisory (DSA-2026-359), so I cannot add detail on interim releases or workarounds.
The weakness is CWE-89, SQL injection. The vector is AV:N/AC:L/PR:L/UI:N: reachable over the network, low complexity, a low privilege account, no user interaction. Confidentiality and availability impacts are rated high, integrity none.
OpenManage Enterprise manages Dell server hardware. A compromise of a management console is more serious than the same bug in a typical business application.
How to check if you're exposed
Dell's advisory page returned an access denied error when I tried to fetch it, so the version below comes from the CVE record only. Read the advisory in a browser before you act on it.
In the OpenManage Enterprise web console, the About page shows the installed version. Compare it with 4.7.0.
If you cannot upgrade at once, reduce exposure. The attacker needs a login, so review the user list and remove accounts that are not needed. The console should only be reachable from a management network. Check firewall rules to confirm it is not open to wider internal networks or the internet.
free in-browser dependency scan is for the dependencies in applications you build. The console version comes from the product itself.
What to do now
- Read Dell advisory DSA-2026-359 in a browser and confirm the fixed version and any workaround.
- Check the installed OpenManage Enterprise version against 4.7.0.
- Take a backup or snapshot of the appliance, then upgrade to 4.7.0 or later using Dell's procedure.
- Remove unused console accounts and enforce strong authentication for the rest.
- Restrict network access to the console to a management network.
Why it matters
CWE-89 happens when user input is placed into a database query as code rather than as a value. The usual fix is parameterized queries. Because the flaw needs only a low privilege login, any account that can reach the vulnerable function can start from there.
Management consoles hold credentials and control over many servers, so they are high value targets. Patching them is slower than patching ordinary applications because they are tied to hardware operations, which is the reason to also tighten who can reach and log in to them.
Quick check
What is the fixed version?
The record says versions prior to 4.7.0 are affected, so 4.7.0 or later is the target. Confirm on Dell's advisory page, which I could not fetch.
Sources
Last reviewed: 18 October 2026.
