CVE-2022-34372

CVE-2022-34372 affects Dell PowerProtect Cyber Recovery prior to 19.11.0.2. The root cause is an authentication bypass affecting access to the docker registry API, allowing a remote, unauthenticated attacker to interact with the API and potentially alter docker images, resulting in loss of integr...

CVE-2022-32481

Dell PowerProtect Cyber Recovery (pre-19.11) contains a local privilege-escalation vulnerability in virtual appliance deployments. A lower-privileged, authenticated user can chain docker commands to escalate to root, enabling full system takeover. Affected versions are prior to 19.11. Remediation...

CVE-2025-26335

Dell PowerProtect Cyber Recovery (versions prior to 19.18.0.2) contains an Insertion of Sensitive Information Into Sent Data vulnerability. The root cause is stated as improper handling of sensitive information, enabling a high-privilege attacker with remote access to potentially expose data. Aff...

CVE-2023-32465

Dell PowerProtect Cyber Recovery is affected by an authentication-bypass vulnerability (CVE-2023-32465). An authenticated remote attacker can gain unauthorized admin access, potentially resulting in a full system takeover. A Nessus/DSA-2023-201 advisory states affected versions are prior to 19.13...

CVE-2026-79938

Dell PowerProtect Cyber Recovery , versions prior to 20.3 , is affected by an Improper Authentication vulnerability. A low-privileged attacker with remote network access can exploit this flaw to achieve unauthorized access . The CVSS 3.1 score is 7.6 (HIGH) , with the primary impact on integrity ...

CVE-2026-49809

Dell PowerProtect Cyber Recovery , versions 20.2 and prior , is affected by an SQL Injection vulnerability (Improper Neutralization of Special Elements used in an SQL Command). A low-privileged attacker with remote access could exploit this flaw to achieve information disclosure . The assigned CV...

CVE-2026-79939

Dell PowerProtect Cyber Recovery versions prior to 20.3 contain a UNIX Symbolic Link (Symlink) Following vulnerability. A low-privileged attacker with local access could exploit this to achieve script injection . NVD scores it 7.8 (High) while Dell's CNA assessment rates it 5.8 (Medium) , reflect...