CVE-2026-67275
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.
Risk Assessment
The risk includes the possibility of cache poisoning, which may lead to redirecting users to malicious content or compromising data integrity.
Recommendation
It is recommended to upgrade Dell PowerProtect One to a version later than 20.1.0.0 to fix the vulnerability.
Other vulnerabilities in Dell PowerProtect One
See all- CVE-2026-74774Medium
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
- CVE-2026-74771Medium
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
- CVE-2026-74770High
Dell PowerProtect One, versions 20.1.0.0 and below, contain an OS Command Injection vulnerability. A low privileged attacker with remote access could potentially exploit this, leading to code execution.
- CVE-2026-68863High
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this, leading to denial of service.
- CVE-2026-68861High
Dell PowerProtect One, versions 20.1.0.0 and below, contain an OS Command Injection vulnerability. A low privileged attacker with remote access could potentially exploit this, leading to remote code execution.
Original NVD description (English source)
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.