CVE-2026-23501

Summary

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected Software

Weaknesses

• CWE-78: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References

• https://www.dell.com/support/kbdoc/en-us/000501664/dsa-2026-096-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-vulnerabilities

• ←Previous
• Next→