CVE-2026-28264: Medium severity Dell PowerProtect Agent Service vulnerability

Q: What level of access does an attacker need to exploit this issue?

An attacker needs local access and only low-privileged permissions. No user interaction is required.

Q: What is the security impact if exploitation succeeds?

Successful exploitation could expose information. The supplied severity vector indicates confidentiality impact is low, with no stated integrity or availability impact.

Q: Which deployments should be prioritized for remediation?

Prioritize systems running Dell PowerProtect Agent Service versions earlier than 20.1, particularly where low-privileged local users can access the host.

Published Apr 8, 2026

Updated

Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Affected Software

2 affected components

Dell PowerProtect Agent Service<20.1

Dell PowerProtect Data Manager<20.1.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Dell PowerProtect Agent Service to a version that resolves this vulnerability.
Fixed in 20.1

Event History

Apr 8, 2026

CVE Published

via MITRE·11:24 AM

Data Sourced

via MITRE·11:24 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs local access and only low-privileged permissions. No user interaction is required.

What is the security impact if exploitation succeeds?

Successful exploitation could expose information. The supplied severity vector indicates confidentiality impact is low, with no stated integrity or availability impact.

Which deployments should be prioritized for remediation?

Prioritize systems running Dell PowerProtect Agent Service versions earlier than 20.1, particularly where low-privileged local users can access the host.

CVE-2026-28264: Medium severity Dell PowerProtect Agent Service vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the security impact if exploitation succeeds?

Which deployments should be prioritized for remediation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the security impact if exploitation succeeds?

Which deployments should be prioritized for remediation?