SEPTEMBER 1, 2026
Live Feed
Back to database
Case File

CVE-2026-74770

HIGH · CVSS 8.8 EPSS 1.09% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-01

CyberRota Analysis

AI-Generated

Dell PowerProtect One versions 20.1.0.0 and earlier are vulnerable to an OS Command Injection flaw, allowing low-privileged remote attackers to execute arbitrary code. This high-severity vulnerability poses significant risks to system integrity and confidentiality, making it crucial for organizations using affected versions to prioritize immediate remediation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-74770
Severity
HIGH
CVSS
8.8
EPSS
1.09%

Original NVD Description

Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)