CVE-2026-79939: Medium severity Dell PowerProtect Cyber Recovery vulnerability
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running Dell PowerProtect Cyber Recovery versions earlier than 20.3 are affected. Exploitation requires local access and low-privileged access, so remotely unauthenticated attackers are not described as being able to exploit it directly.
What level of attacker access is required?
An attacker needs local access and low privileges. The attack complexity is rated high, and no user interaction is required.
What is the potential impact if exploitation succeeds?
Successful exploitation could lead to script injection. The supplied severity vector indicates low confidentiality impact, high integrity impact, and low availability impact.