CVE Catalog
CVE-2026-28264
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk0.13%
3th percentile - higher than 3% of all known CVEs
Summary
Dell PowerProtect Agent Service prior to version 20.1 has incorrect permission assignment for critical resources, allowing a low-privileged local attacker to access information.
Risk Assessment
A local attacker could gain unauthorized access to sensitive data stored by the PowerProtect Agent.
Recommendation
Update Dell PowerProtect Agent to version 20.1 or later to remediate this vulnerability.
Original NVD description (English source)
Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.