CVE-2026-67275

Received Received - Intake

Dell PowerProtect One Cache Poisoning Vulnerability

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: Dell

Description

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-26

Generated

2026-08-27

AI Q&A

2026-08-27

EPSS Evaluated

N/A

NVD

CVE-2026-67275

Affected Vendors & Products

Vendor	Product	Version / Range
dell	powerprotect_one	to 20.1.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1357	The product is built from multiple separate components, but it uses a component that is not sufficiently trusted to meet expectations for security, reliability, updateability, and maintainability.

Attack-Flow Graph

Executive Summary

Dell PowerProtect One versions 20.1.0.0 and below have a vulnerability where they rely on components that are not sufficiently trustworthy. An attacker without authentication but with remote access could exploit this to poison the cache, potentially altering cached data.

Detection Guidance

Detection of this vulnerability requires checking for cache poisoning in Dell PowerProtect One versions 20.1.0.0 and below. Monitor network traffic for unusual DNS or ARP responses and verify software versions. Use commands like 'nslookup' or 'dig' to inspect DNS cache entries and 'arp -a' to check ARP tables for inconsistencies.

Impact Analysis

This vulnerability could allow an attacker to manipulate cached data, leading to incorrect or malicious information being served to users. This might result in data corruption, misinformation, or further attacks leveraging the poisoned cache.

Compliance Impact

This vulnerability could potentially lead to cache poisoning, which may allow unauthorized data manipulation or exposure. Such risks may impact compliance with standards like GDPR or HIPAA by compromising data integrity and confidentiality, though specific compliance impacts depend on system configuration and usage.

Mitigation Strategies

Update Dell PowerProtect One to versions above 20.1.0.0 to address the vulnerability. Ensure network access controls are in place to restrict unauthorized remote access.

Hi! I’m here to help you understand CVE-2026-67275. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70