CVE-2026-79938: High severity Dell PowerProtect Cyber Recovery vulnerability
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell PowerProtect Cyber Recoveryto a version that resolves this vulnerability.Fixed in 20.3
Event History
Frequently Asked Questions
Which deployments are affected?
Dell PowerProtect Cyber Recovery versions earlier than 20.3 are affected. The provided information does not identify any configuration-specific limitation or exception.
What does an attacker need to exploit this issue?
An attacker needs remote access and low-privileged access to the affected product. No user interaction is required.
What is the likely impact of successful exploitation?
Successful exploitation could result in unauthorized access. The supplied severity vector indicates low confidentiality impact, high integrity impact, and low availability impact.
What should be prioritized for remediation?
Upgrade affected Dell PowerProtect Cyber Recovery deployments to version 20.3 or later. The provided information does not specify a workaround for systems that cannot be upgraded immediately.