Dell TechnologiesCVE-2026-23501

Dell Technologies RecoverPoint for Virtual Machines: command injection

CVE-2026-23501 · Published Aug 19, 2026 · updated Aug 20, 2026

High7.2

Fix: upgrade to 6.1 or later

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected versions

Package	Affected	Fixed in
RecoverPoint for Virtual Machines Product	< 6.1	6.1

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-78

More Dell Technologies advisories

All Dell Technologies

High 8.8Aug 19

Dell Technologies OpenManage Enterprise: SQL injectionCVE-2026-71176fixed in 4.7.0 or later Medium 5.5Aug 19

Dell Command Update (DCU): improper authorizationCVE-2026-67266fixed in 5.7.1 Medium 5.5Aug 19

Dell Command Update (DCU): information disclosureCVE-2026-67267fixed in 5.7.1 Medium 6.5Aug 19

Dell Command Update (DCU): XML external entityCVE-2026-67268fixed in 5.7.1 High 8.8Aug 19

Dell Command Update (DCU): missing authorizationCVE-2026-58565fixed in 5.7.1 High 7.3Aug 19

Dell Command Update (DCU): missing authorizationCVE-2026-58562fixed in 5.7.1