Dell Powerprotect Cyber Recovery vulnerabilities

7 CVEs affecting Dell Powerprotect Cyber Recovery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-79939, published 2026-08-26.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-34372, published 2022-09-01. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker…
• CVE-2023-32465, published 2023-06-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber…
• CVE-2026-79938, published 2026-08-26. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,…
• CVE-2026-49809, published 2026-08-26. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker…
• CVE-2025-26335, published 2025-04-11. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent Data vulnerability. A high privileged attacker with remote access could…
• CVE-2022-32481, published 2022-07-07. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker…
• CVE-2026-79939, published 2026-08-26. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this…