Improper Certificate Validation in Dell PowerProtect One
CVE-2026-74774

5.9MEDIUM

Key Information:

Vendor

Dell
Status
Powerprotect One
Vendor
CVE Published:
26 August 2026

What is CVE-2026-74774?

Dell PowerProtect One, specifically in versions 20.1.0.0 and below, is vulnerable to improper certificate validation. This vulnerability allows unauthenticated remote attackers to exploit system weaknesses, potentially leading to the bypass of critical protection mechanisms. Organizations utilizing affected versions should promptly address this vulnerability to safeguard their systems and data integrity.

Affected Version(s)

PowerProtect One 0 < 20.3.0.0

References

https://www.dell.com/support/kbdoc/en-us/000500902/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.