CVE-2026-74771

Received Received - Intake

Authorization Bypass in Dell PowerProtect One Leading to Information Tampering

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: Dell

Description

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-26

Generated

2026-08-27

AI Q&A

2026-08-27

EPSS Evaluated

N/A

NVD

CVE-2026-74771

Affected Vendors & Products

Vendor	Product	Version / Range
dell	powerprotect_one	to 20.1.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

Dell PowerProtect One versions 20.1.0.0 and below have an Authorization Bypass Through User-Controlled Key vulnerability. This means a low-privileged attacker with remote access could bypass authorization controls and tamper with information stored or processed by the system.

Detection Guidance

This vulnerability involves authorization bypass in Dell PowerProtect One versions 20.1.0.0 and below. Detection requires checking software versions and monitoring for unauthorized access attempts. Use commands like 'show version' on Dell systems to verify installed versions. Inspect network logs for unusual remote access patterns or tampering with data.

Impact Analysis

An attacker could modify critical data, leading to incorrect backups, corrupted recovery points, or unauthorized changes to protected information. This could disrupt operations and compromise data integrity.

Compliance Impact

This vulnerability could lead to unauthorized data tampering, violating integrity requirements in GDPR and HIPAA. Non-compliance may result in legal penalties, loss of certification, or reputational damage due to compromised data protection.

Mitigation Strategies

Update Dell PowerProtect One to a version higher than 20.1.0.0 to address the Authorization Bypass Through User-Controlled Key vulnerability.

Hi! I’m here to help you understand CVE-2026-74771. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70