CVE-2026-79939
MediumCVSS 5.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain a UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
Risk Assessment
The risk includes the possibility of executing a malicious script by an attacker with local access, which may lead to system integrity compromise and unauthorized actions.
Recommendation
It is recommended to upgrade Dell PowerProtect Cyber Recovery to version 20.3 or later to remediate the vulnerability.
Other vulnerabilities in Dell PowerProtect Cyber Recovery
See all- CVE-2026-79938High
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this, leading to unauthorized access.
- CVE-2026-49809Medium
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Original NVD description (English source)
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.