SEPTEMBER 1, 2026
Live Feed
Back to database
Case File

CVE-2026-68861

HIGH · CVSS 8.8 EPSS 1.00% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-01

CyberRota Analysis

AI-Generated

Dell PowerProtect One versions 20.1.0.0 and earlier are susceptible to an OS command injection vulnerability, allowing low-privileged attackers with remote access to execute arbitrary commands on the system. This high-severity flaw poses a significant risk to the integrity and confidentiality of the affected systems. Organizations using these versions should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-68861
Severity
HIGH
CVSS
8.8
EPSS
1.00%

Original NVD Description

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)