AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Dell TechnologiesCVE-2026-74774

Dell Technologies PowerProtect One: improper certificate validation

Dell Technologies

CVE-2026-74774 · Published Aug 26, 2026 · updated Aug 28, 2026

Medium5.9
Fix: upgrade to 20.3.0.0 or later
Dell Technologies advisory

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Affected versions

PackageAffectedFixed in
PowerProtect One
Product
< 20.3.0.020.3.0.0
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-295

More Dell Technologies advisories

All Dell Technologies
High 7.6Aug 26Dell Technologies Cyber Recovery: improper authenticationCVE-2026-79938fixed in Power Protect Cyber Recovery 20.3.0.0 +2Medium 5.8Aug 26Dell PowerProtect Cyber RecoveryCVE-2026-79939fixed in Power Protect Cyber Recovery 20.3.0.0 +2Medium 4.3Aug 26Dell Technologies Cloud Disaster Recovery: server-side request forgeryCVE-2026-71172fixed in CDR 20.3High 8.8Aug 26Dell Technologies PowerProtect One: command injectionCVE-2026-74770fixed in 20.3.0.0Medium 6.5Aug 26Dell Technologies PowerProtect One: tamperingCVE-2026-74771fixed in 20.3.0.0Medium 5.3Aug 26Dell PowerProtect OneCVE-2026-67275fixed in 20.3.0.0