CVE-2026-23501

HighCVSS 7.2

Published: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an OS Command Injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution.

Risk Assessment

The attack can lead to full system compromise, compromising confidentiality, integrity, and availability of data and infrastructure.

Recommendation

Apply the vendor-provided patches from Dell for versions 6.0.3 and 6.0.3.1.

Original NVD description (English source)

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.