DSA-2026-370: Security Update for Dell PowerProtect Cyber Recovery Multiple Third-Party Component Vulnerabilities

Summary: Dell PowerProtect Cyber Recovery remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Impact

Critical

Details

Third-party Component

CVEs

More Information

Cyber Recovery Software

CVE-2025-11537, CVE-2025-12781, CVE-2025-47912, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61726, CVE-2025-61727, CVE-2025-61729, CVE-2025-61730, CVE-2025-62718, CVE-2025-68121, CVE-2026-1002, CVE-2026-22737, CVE-2026-22740, CVE-2026-22745, CVE-2026-25679, CVE-2026-27142, CVE-2026-3121, CVE-2026-3190, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289, CVE-2026-33487, CVE-2026-33811, CVE-2026-33814, CVE-2026-33870, CVE-2026-33871, CVE-2026-3429, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480, CVE-2026-34481, CVE-2026-37978, CVE-2026-37979, CVE-2026-37980, CVE-2026-37981, CVE-2026-37982, CVE-2026-3872, CVE-2026-39836, CVE-2026-39852, CVE-2026-40175, CVE-2026-40895, CVE-2026-40973, CVE-2026-41006, CVE-2026-41007, CVE-2026-41284, CVE-2026-41293, CVE-2026-41417, CVE-2026-41695, CVE-2026-41701, CVE-2026-41710, CVE-2026-41711, CVE-2026-41714, CVE-2026-41716, CVE-2026-41721, CVE-2026-41728, CVE-2026-41729, CVE-2026-41730, CVE-2026-41837, CVE-2026-41838, CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41845, CVE-2026-41846, CVE-2026-41848, CVE-2026-41850, CVE-2026-41851, CVE-2026-41852, CVE-2026-41853, CVE-2026-41854, CVE-2026-41855, CVE-2026-42038, CVE-2026-42039, CVE-2026-42041, CVE-2026-42043, CVE-2026-42044, CVE-2026-42198, CVE-2026-42264, CVE-2026-42498, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-4282, CVE-2026-4325, CVE-2026-43512, CVE-2026-43513, CVE-2026-43515, CVE-2026-44249, CVE-2026-44487, CVE-2026-44490, CVE-2026-44495, CVE-2026-44893, CVE-2026-45416, CVE-2026-45536, CVE-2026-45673, CVE-2026-45674, CVE-2026-4628, CVE-2026-4630, CVE-2026-4634, CVE-2026-4636, CVE-2026-47244, CVE-2026-47691, CVE-2026-48043, CVE-2026-48059, CVE-2026-49844, CVE-2026-50010, CVE-2026-50020, CVE-2026-50229, CVE-2026-50559, CVE-2026-50560, CVE-2026-53404, CVE-2026-53434, CVE-2026-54291, CVE-2026-54399, CVE-2026-54428, CVE-2026-55276, CVE-2026-55955, CVE-2026-55956, CVE-2026-59083, CVE-2026-59084, CVE-2026-59888, CVE-2026-59889, CVE-2026-59901, CVE-2026-6860, CVE-2026-7307, CVE-2026-7500, CVE-2026-7504, CVE-2026-7507, CVE-2026-7571, CVE-2026-8830, CVE-2026-8922, CVE-2026-9087, CVE-2026-9704, CVE-2026-9791, CVE-2026-9792, CVE-2026-9794, CVE-2026-9795, CVE-2026-9801, CVE-2026-9802, CVE-2026-9803

https://nvd.nist.gov/vuln/searchThis hyperlink is taking you to a website outside of Dell Technologies.

SUSE Linux Enterprise Server 15 SP4

CVE-2021-31879, CVE-2022-4994, CVE-2023-53995, CVE-2024-10524, CVE-2025-10263, CVE-2025-21710, CVE-2025-24528, CVE-2025-3576, CVE-2025-40909, CVE-2025-54505, CVE-2025-58149, CVE-2025-58150, CVE-2025-68324, CVE-2025-70873, CVE-2025-7709, CVE-2025-8114, CVE-2025-8277, CVE-2025-8732, CVE-2025-9714, CVE-2026-0864, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, CVE-2026-10536, CVE-2026-10723, CVE-2026-11331, CVE-2026-11622, CVE-2026-11721, CVE-2026-11822, CVE-2026-11824, CVE-2026-11850, CVE-2026-11940, CVE-2026-11972, CVE-2026-11979, CVE-2026-12064, CVE-2026-12087, CVE-2026-13204, CVE-2026-13321, CVE-2026-15146, CVE-2026-15308, CVE-2026-15816, CVE-2026-1757, CVE-2026-23392, CVE-2026-23553, CVE-2026-23557, CVE-2026-23558, CVE-2026-25707, CVE-2026-3039, CVE-2026-31405, CVE-2026-31473, CVE-2026-31500, CVE-2026-31598, CVE-2026-31613, CVE-2026-31628, CVE-2026-31629, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31758, CVE-2026-31759, CVE-2026-31771, CVE-2026-3276, CVE-2026-33186, CVE-2026-33814, CVE-2026-34180, CVE-2026-3497, CVE-2026-34986, CVE-2026-35388, CVE-2026-3592, CVE-2026-3731, CVE-2026-39821, CVE-2026-39881, CVE-2026-39984, CVE-2026-40355, CVE-2026-40356, CVE-2026-4046, CVE-2026-41567, CVE-2026-41579, CVE-2026-41991, CVE-2026-42307, CVE-2026-42487, CVE-2026-42488, CVE-2026-42489, CVE-2026-42490, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-42766, CVE-2026-43033, CVE-2026-43037, CVE-2026-43038, CVE-2026-43077, CVE-2026-43198, CVE-2026-43206, CVE-2026-43499, CVE-2026-43501, CVE-2026-4360, CVE-2026-43961, CVE-2026-44605, CVE-2026-44656, CVE-2026-44932, CVE-2026-44933, CVE-2026-44941, CVE-2026-44942, CVE-2026-45130, CVE-2026-45447, CVE-2026-45852, CVE-2026-45970, CVE-2026-45984, CVE-2026-46021, CVE-2026-46037, CVE-2026-46043, CVE-2026-46052, CVE-2026-46056, CVE-2026-46080, CVE-2026-46090, CVE-2026-46109, CVE-2026-46113, CVE-2026-46116, CVE-2026-46120, CVE-2026-46123, CVE-2026-46145, CVE-2026-46150, CVE-2026-46159, CVE-2026-46173, CVE-2026-46174, CVE-2026-46193, CVE-2026-46197, CVE-2026-46227, CVE-2026-46229, CVE-2026-46243, CVE-2026-46253, CVE-2026-46266, CVE-2026-46274, CVE-2026-46319, CVE-2026-46320, CVE-2026-46323, CVE-2026-46331, CVE-2026-46483, CVE-2026-48863, CVE-2026-52909, CVE-2026-52918, CVE-2026-52923, CVE-2026-52924, CVE-2026-52943, CVE-2026-52955, CVE-2026-52956, CVE-2026-52958, CVE-2026-52967, CVE-2026-52969, CVE-2026-52972, CVE-2026-52986, CVE-2026-52993, CVE-2026-53016, CVE-2026-53041, CVE-2026-53050, CVE-2026-53053, CVE-2026-53071, CVE-2026-53072, CVE-2026-53131, CVE-2026-53133, CVE-2026-53196, CVE-2026-53224, CVE-2026-53246, CVE-2026-53253, CVE-2026-53256, CVE-2026-53260, CVE-2026-53267, CVE-2026-53354, CVE-2026-53357, CVE-2026-53359, CVE-2026-53375, CVE-2026-53388, CVE-2026-53391, CVE-2026-53402, CVE-2026-5435, CVE-2026-5450, CVE-2026-5704, CVE-2026-57432, CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58016, CVE-2026-58469, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472, CVE-2026-5928, CVE-2026-5946, CVE-2026-59843, CVE-2026-59844, CVE-2026-59845, CVE-2026-59846, CVE-2026-59847, CVE-2026-59848, CVE-2026-59850, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858, CVE-2026-61548, CVE-2026-6238, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-63794, CVE-2026-63806, CVE-2026-63807, CVE-2026-63824, CVE-2026-63829, CVE-2026-63893, CVE-2026-63917, CVE-2026-63919, CVE-2026-63921, CVE-2026-63922, CVE-2026-63924, CVE-2026-63971, CVE-2026-63975, CVE-2026-63984, CVE-2026-63994, CVE-2026-64106, CVE-2026-64189, CVE-2026-64194, CVE-2026-64560, CVE-2026-64561, CVE-2026-64564, CVE-2026-64600, CVE-2026-6893, CVE-2026-7210, CVE-2026-7383, CVE-2026-7774, CVE-2026-8286, CVE-2026-8328, CVE-2026-8376, CVE-2026-8450, CVE-2026-8458, CVE-2026-8924, CVE-2026-8927, CVE-2026-9076, CVE-2026-9079, CVE-2026-9080, CVE-2026-9149, CVE-2026-9150, CVE-2026-9545, CVE-2026-9547

https://www.suse.com/security/cve/This hyperlink is taking you to a website outside of Dell Technologies.

 

SUSE Linux Enterprise Server 15 SP6

CVE-2023-2058, CVE-2024-2312, CVE-2025-10263, CVE-2025-14831, CVE-2025-54505, CVE-2025-54518, CVE-2025-68324, CVE-2025-70873, CVE-2025-7709, CVE-2025-8732, CVE-2026-0964, CVE-2026-0965, CVE-2026-0966, CVE-2026-0967, CVE-2026-0968, CVE-2026-0989, CVE-2026-0990, CVE-2026-0992, CVE-2026-10536, CVE-2026-10723, CVE-2026-10822, CVE-2026-11331, CVE-2026-11622, CVE-2026-11721, CVE-2026-11822, CVE-2026-11824, CVE-2026-11850, CVE-2026-11979, CVE-2026-12064, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, CVE-2026-1502, CVE-2026-1703, CVE-2026-1757, CVE-2026-23239, CVE-2026-23240, CVE-2026-23268, CVE-2026-23269, CVE-2026-23271, CVE-2026-23273, CVE-2026-23351, CVE-2026-23392, CVE-2026-23393, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411, CVE-2026-23449, CVE-2026-23450, CVE-2026-23458, CVE-2026-23461, CVE-2026-23462, CVE-2026-23557, CVE-2026-23558, CVE-2026-25707, CVE-2026-29004, CVE-2026-3039, CVE-2026-31402, CVE-2026-31403, CVE-2026-31405, CVE-2026-31408, CVE-2026-31436, CVE-2026-31470, CVE-2026-31473, CVE-2026-31500, CVE-2026-31504, CVE-2026-31505, CVE-2026-31507, CVE-2026-31512, CVE-2026-31528, CVE-2026-31533, CVE-2026-31570, CVE-2026-31586, CVE-2026-31588, CVE-2026-31602, CVE-2026-31607, CVE-2026-31613, CVE-2026-31614, CVE-2026-31622, CVE-2026-31629, CVE-2026-31649, CVE-2026-31656, CVE-2026-31662, CVE-2026-31669, CVE-2026-31685, CVE-2026-31694, CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31700, CVE-2026-31738, CVE-2026-31758, CVE-2026-31759, CVE-2026-31771, CVE-2026-31787, CVE-2026-3219, CVE-2026-33845, CVE-2026-33846, CVE-2026-34180, CVE-2026-34182, CVE-2026-3446, CVE-2026-34743, CVE-2026-34757, CVE-2026-3497, CVE-2026-34986, CVE-2026-35385, CVE-2026-35388, CVE-2026-35414, CVE-2026-3592, CVE-2026-3593, CVE-2026-3731, CVE-2026-3833, CVE-2026-39829, CVE-2026-39830, CVE-2026-39881, CVE-2026-40355, CVE-2026-40356, CVE-2026-4046, CVE-2026-41054, CVE-2026-41991, CVE-2026-42009, CVE-2026-42010, CVE-2026-42011, CVE-2026-42012, CVE-2026-42013, CVE-2026-42014, CVE-2026-42015, CVE-2026-42307, CVE-2026-42487, CVE-2026-42488, CVE-2026-42489, CVE-2026-42490, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-42508, CVE-2026-42766, CVE-2026-42767, CVE-2026-42770, CVE-2026-43023, CVE-2026-43025, CVE-2026-43027, CVE-2026-43037, CVE-2026-43038, CVE-2026-43044, CVE-2026-43050, CVE-2026-43074, CVE-2026-43077, CVE-2026-43109, CVE-2026-43110, CVE-2026-43120, CVE-2026-43126, CVE-2026-43190, CVE-2026-43198, CVE-2026-43206, CVE-2026-43214, CVE-2026-43284, CVE-2026-43329, CVE-2026-43330, CVE-2026-43334, CVE-2026-43362, CVE-2026-43365, CVE-2026-43366, CVE-2026-43437, CVE-2026-43494, CVE-2026-43499, CVE-2026-43501, CVE-2026-43503, CVE-2026-43961, CVE-2026-44656, CVE-2026-44933, CVE-2026-44941, CVE-2026-44942, CVE-2026-45130, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-45852, CVE-2026-45878, CVE-2026-45886, CVE-2026-45910, CVE-2026-45932, CVE-2026-45970, CVE-2026-45984, CVE-2026-46004, CVE-2026-46021, CVE-2026-46037, CVE-2026-46043, CVE-2026-46052, CVE-2026-46071, CVE-2026-46076, CVE-2026-46090, CVE-2026-46113, CVE-2026-46114, CVE-2026-46116, CVE-2026-46120, CVE-2026-46123, CVE-2026-46150, CVE-2026-46159, CVE-2026-46173, CVE-2026-46197, CVE-2026-46209, CVE-2026-46227, CVE-2026-46229, CVE-2026-46242, CVE-2026-46253, CVE-2026-46266, CVE-2026-46273, CVE-2026-46274, CVE-2026-46289, CVE-2026-46300, CVE-2026-46319, CVE-2026-46320, CVE-2026-46330, CVE-2026-46331, CVE-2026-46483, CVE-2026-46598, CVE-2026-4786, CVE-2026-4873, CVE-2026-48863, CVE-2026-5260, CVE-2026-52909, CVE-2026-52918, CVE-2026-52923, CVE-2026-52924, CVE-2026-52933, CVE-2026-52943, CVE-2026-52955, CVE-2026-52956, CVE-2026-52958, CVE-2026-52969, CVE-2026-52972, CVE-2026-52993, CVE-2026-53016, CVE-2026-53041, CVE-2026-53052, CVE-2026-53053, CVE-2026-53071, CVE-2026-53072, CVE-2026-53133, CVE-2026-53178, CVE-2026-53182, CVE-2026-53196, CVE-2026-53253, CVE-2026-53256, CVE-2026-53357, CVE-2026-53359, CVE-2026-53362, CVE-2026-5419, CVE-2026-5435, CVE-2026-5450, CVE-2026-5545, CVE-2026-5704, CVE-2026-58010, CVE-2026-58011, CVE-2026-58012, CVE-2026-58013, CVE-2026-58014, CVE-2026-58016, CVE-2026-5928, CVE-2026-5946, CVE-2026-5950, CVE-2026-59843, CVE-2026-59844, CVE-2026-59845, CVE-2026-59846, CVE-2026-59847, CVE-2026-59848, CVE-2026-59850, CVE-2026-59856, CVE-2026-59857, CVE-2026-59858, CVE-2026-6019, CVE-2026-6100, CVE-2026-61548, CVE-2026-6238, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-6253, CVE-2026-6276, CVE-2026-6357, CVE-2026-6429, CVE-2026-6893, CVE-2026-7383, CVE-2026-8286, CVE-2026-8450, CVE-2026-8458, CVE-2026-8643, CVE-2026-8924, CVE-2026-8927, CVE-2026-9076, CVE-2026-9079, CVE-2026-9080, CVE-2026-9149, CVE-2026-9150, CVE-2026-9545, CVE-2026-9547

https://www.suse.com/security/cve/This hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVE(s)

Description

CVSS Base Score

CVSS Vector String

CVE-2026-79938

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

7.6

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2026-49809

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

5.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVE(s)

Description

CVSS Base Score

CVSS Vector String

CVE-2026-79938

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

7.6

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2026-49809

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

5.8

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product

Software/Firmware

Affected Versions

Remediated Versions

Link

Power Protect Cyber Recovery

Cyber Recovery Software

Versions 20.2.0.0 and Prior

Version 20.3.0.0

Support for PowerProtect Cyber Recovery

Dell Cyber Recovery

Cyber Recovery SLES 15 SP4 OS Update

 

Versions prior to cyber-recovery-osupdate-15.4.0-19.bin

Version cyber-recovery-osupdate-15.4.0-19.bin

 

Support for PowerProtect Cyber Recovery

Dell Cyber Recovery

Cyber Recovery SLES 15 SP6 OS Update

Versions prior to cyber-recovery-osupdate-15.6.1-1.bin

Version cyber-recovery-osupdate-15.6.1-1.bin

 

Support for PowerProtect Cyber Recovery

 

Product

Software/Firmware

Affected Versions

Remediated Versions

Link

Power Protect Cyber Recovery

Cyber Recovery Software

Versions 20.2.0.0 and Prior

Version 20.3.0.0

Support for PowerProtect Cyber Recovery

Dell Cyber Recovery

Cyber Recovery SLES 15 SP4 OS Update

 

Versions prior to cyber-recovery-osupdate-15.4.0-19.bin

Version cyber-recovery-osupdate-15.4.0-19.bin

 

Support for PowerProtect Cyber Recovery

Dell Cyber Recovery

Cyber Recovery SLES 15 SP6 OS Update

Versions prior to cyber-recovery-osupdate-15.6.1-1.bin

Version cyber-recovery-osupdate-15.6.1-1.bin

 

Support for PowerProtect Cyber Recovery

 

Revision History

Revision

Date

Description

1.0

2026-08-20

Initial Release

2.0

2026-08-21

Updated Acknowledgements section

3.0

2026-08-25

Updated Proprietary Code table to include CVE-2026-79938 and CVE-2026-79939

 

Acknowledgements

  • Dell would like to thank WinD39 - Huynh Dinh Vu for reporting these issues: CVE-2026-49809

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Affected Products

PowerProtect Cyber Recovery, Cyber Recovery Series
Article Properties
Article Number: 000501456
Article Type: Dell Security Advisory
Last Modified: 25 Aug 2026
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.