CVE-2026-28264

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-28264
Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000447277/dsa-2026-158-security-update-dell-powerprotect-data-manager-for-multiple-security-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*
History

02 Jun 2026, 17:47

Type Values Removed Values Added
CPE cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*
References () https://www.dell.com/support/kbdoc/en-us/000447277/dsa-2026-158-security-update-dell-powerprotect-data-manager-for-multiple-security-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000447277/dsa-2026-158-security-update-dell-powerprotect-data-manager-for-multiple-security-vulnerabilities - Vendor Advisory
First Time Dell powerprotect Data Manager
Dell

08 Apr 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-08 12:16

Updated : 2026-06-02 17:47

NVD link : CVE-2026-28264

Mitre link : CVE-2026-28264

CVE.ORG link : CVE-2026-28264

JSON object : View

Products Affected

dell

  • powerprotect_data_manager
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource