CVE-2026-79939

Received Received - Intake

UNIX Symlink Following Leads to Script Injection in Dell PowerProtect Cyber Recovery

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: Dell

Description

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-26

Last Modified

2026-08-26

Generated

2026-08-27

AI Q&A

2026-08-27

EPSS Evaluated

N/A

NVD

CVE-2026-79939

Affected Vendors & Products

Vendor	Product	Version / Range
dell	powerprotect_cyber_recovery	to 20.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-61	The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.

Attack-Flow Graph

Executive Summary

Dell PowerProtect Cyber Recovery versions before 20.3 have a UNIX Symlink Following vulnerability. This allows a low-privileged attacker with local access to exploit the flaw and perform script injection.

Impact Analysis

An attacker could execute malicious scripts on the affected system, potentially leading to unauthorized access, data manipulation, or further compromise of the Cyber Recovery environment.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, which may violate compliance requirements for data protection and integrity under standards like GDPR and HIPAA.

Mitigation Strategies

Update Dell PowerProtect Cyber Recovery to version 20.3 or later to address the Symlink vulnerability. Ensure low-privileged users have restricted access and monitor for unusual script execution activities.

Hi! I’m here to help you understand CVE-2026-79939. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70