EUVD-2026-66672
GHSA-jwh8-4mw6-g2wq
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Network-reachable app, low-privilege account required, no user interaction; integrity-only impact consistent with IDOR data tampering, no confidentiality or availability loss.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Lifecycle Timeline
2DescriptionCVE.org
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
AnalysisAI
Authorization bypass in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to manipulate user-controlled keys and bypass object-level authorization checks, resulting in unauthorized data tampering. The vulnerability is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), an IDOR-class flaw where the application trusts client-supplied identifiers without server-side authorization validation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privileged account on the Dell PowerProtect One instance, as indicated by PR:L in the CVSS vector - unauthenticated access is not sufficient. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 6.5 (Medium) reflects a network-exploitable flaw requiring only low privileges with no user interaction and low attack complexity, but no confidentiality or availability impact - only integrity (I:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who holds a valid low-privileged account on a Dell PowerProtect One deployment sends crafted API or web requests in which they substitute another user's or object's key for their own - for example, replacing their own backup job or policy identifier with a known or enumerated one belonging to a higher-privileged account. Because the server fails to validate that the authenticated user owns or is authorized to modify the referenced object, the attacker successfully tampers with backup configurations, policies, or data records they should not be able to modify. … |
| Remediation | Organizations should consult Dell's security advisory DSA-2026-369 at https://www.dell.com/support/kbdoc/en-us/000500902/dsa-2026-369-security-update-for-dell-powerprotect-one-multiple-vulnerabilities for the patched version, as an exact fixed release version was not specified in the available input data - only the advisory reference is confirmed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Powerprotect One
View allOS command injection in Dell PowerProtect One versions 20.1.0.0 and below allows remote code execution by low-privileged
OS Command Injection in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to exe
Stack-based buffer overflow in Dell PowerProtect One versions 20.1.0.0 and below enables unauthenticated remote attacker
Improper certificate validation in Dell PowerProtect One versions 20.1.0.0 and below allows a network-positioned, unauth
Cache poisoning in Dell PowerProtect One versions 20.1.0.0 and below exposes environments to integrity violations via an
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today