CVE-2026-70424: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Dell OpenManage Enterprise

CVE-2026-70424 describes an improper limitation of a pathname to a restricted directory (path traversal) vulnerability in Dell OpenManage Enterprise prior to version 4.7.0. This flaw allows a low privileged attacker with remote access to traverse directories and potentially access sensitive information outside the intended directory scope. The vulnerability impacts confidentiality but does not affect integrity or availability. No known exploits are reported in the wild. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An attacker with low privileges and remote access could exploit this vulnerability to gain unauthorized access to sensitive information by traversing directories outside of restricted paths. This leads to information exposure but does not affect system integrity or availability.

No explicit patch or remediation information is provided. Patch status is not yet confirmed — check Dell's official advisory for current remediation guidance. Until a fix is available, restrict remote access to trusted users and monitor for suspicious activity related to directory traversal attempts.