Skip to content
CVE PROGRAM SOURCE RECORD5.8 Medium

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potenti

Description

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Power Protect Cyber Recovery

Default version status: unaffected

  • 0 to < 20.3.0.0affected

Dell Cyber Recovery

Default version status: unaffected

  • 0 to < osupdate-15.4.0-19.binaffected
  • 0 to < osupdate-15.6.1-1.binaffected

References