8.8
High
CVE-2026-74770 Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS…
Description
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerProtect One 20.3 | earliest → < 20.3.0.0 | 20.3.0.0 |
Other CVEs of PowerProtect One
The 6 CVEs of PowerProtect One →
CVE-2026-74771
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key…
6.5
Medium
CVE-2026-74774
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability
5.9
Medium
CVE-2026-67275
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component…
5.3
Medium
CVE-2026-68861
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS…
8.8
High