AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-74770

Dell Technologies PowerProtect One: command injection

Dell Technologies

CVE-2026-74770 · Published Aug 26, 2026 · updated Aug 28, 2026

High8.8
Fix: upgrade to 20.3.0.0 or later
Dell Technologies advisory

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Affected versions

PackageAffectedFixed in
PowerProtect One
Product
< 20.3.0.020.3.0.0
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-78

More Dell Technologies advisories

All Dell Technologies
High 7.6Aug 26Dell Technologies Cyber Recovery: improper authenticationCVE-2026-79938fixed in Power Protect Cyber Recovery 20.3.0.0 +2Medium 5.8Aug 26Dell PowerProtect Cyber RecoveryCVE-2026-79939fixed in Power Protect Cyber Recovery 20.3.0.0 +2Medium 4.3Aug 26Dell Technologies Cloud Disaster Recovery: server-side request forgeryCVE-2026-71172fixed in CDR 20.3Medium 6.5Aug 26Dell Technologies PowerProtect One: tamperingCVE-2026-74771fixed in 20.3.0.0Medium 5.9Aug 26Dell Technologies PowerProtect One: improper certificate validationCVE-2026-74774fixed in 20.3.0.0Medium 5.3Aug 26Dell PowerProtect OneCVE-2026-67275fixed in 20.3.0.0