EUVD-2026-66674
GHSA-g2c5-74fr-vfqh
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable management interface requires only low-privilege authentication; OS command injection yields full host compromise with no scope change to external systems.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
AnalysisAI
OS command injection in Dell PowerProtect One versions 20.1.0.0 and below allows remote code execution by low-privileged authenticated users. The CWE-78 root cause indicates that user-controlled input is passed unsanitized to OS-level shell commands exposed through a network-accessible interface. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privilege credential on the Dell PowerProtect One system, consistent with the CVSS PR:L metric - unauthenticated remote exploitation is not indicated by available data. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) presents a realistic and prioritizable threat: the attack is network-reachable, requires no elevated privileges beyond a basic authenticated session, and yields full host-level code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with a low-privilege account on Dell PowerProtect One submits a crafted request to a network-accessible management endpoint, embedding OS metacharacters (e.g., a semicolon or pipe followed by an arbitrary command) in a parameter that is subsequently passed unsanitized to a shell invocation. The injected command executes with the privileges of the service process, granting the attacker arbitrary code execution on the appliance and potential access to backup data stores or lateral movement within the protected environment. … |
| Remediation | Apply the vendor-supplied patch documented in Dell Security Advisory DSA-2026-369, available at https://www.dell.com/support/kbdoc/en-us/000500902/dsa-2026-369-security-update-for-dell-powerprotect-one-multiple-vulnerabilities. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: audit all systems running PowerProtect One to identify affected versions (20.1.0.0 and below) and document exposure; establish communication with Dell technical support regarding patch timeline. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Powerprotect One
View allOS Command Injection in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to exe
Stack-based buffer overflow in Dell PowerProtect One versions 20.1.0.0 and below enables unauthenticated remote attacker
Authorization bypass in Dell PowerProtect One versions 20.1.0.0 and below allows a remote low-privileged attacker to man
Improper certificate validation in Dell PowerProtect One versions 20.1.0.0 and below allows a network-positioned, unauth
Cache poisoning in Dell PowerProtect One versions 20.1.0.0 and below exposes environments to integrity violations via an
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today