SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-23501

HIGH · CVSS 7.2 EPSS 1.29% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

Dell RecoverPoint for VMs versions 6.0.3 and 6.0.3.1 are vulnerable to an OS command injection flaw that allows high-privileged remote attackers to execute arbitrary commands. This could lead to unauthorized access and control over the affected systems, posing a significant risk to data integrity and availability. Organizations using these specific versions should prioritize patching to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-23501
Severity
HIGH
CVSS
7.2
EPSS
1.29%

Original NVD Description

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.