CVE-2026-79939 Dell CVE debrief

Who should care

System administrators and security teams responsible for Dell PowerProtect Cyber Recovery systems, especially those with local access to the systems, should review and apply the necessary security updates to mitigate this vulnerability. Operators of affected platforms and security teams managing vulnerability response should prioritize this issue due to the potential for script injection and the low privilege required for exploitation.

Technical summary

CVE-2026-79939 is a UNIX Symbolic Link (Symlink) Following vulnerability in Dell PowerProtect Cyber Recovery versions prior to 20.3. A low privileged attacker with local access could potentially exploit this vulnerability, leading to script injection. The vulnerability is rated as Medium severity with a CVSS score of 5.8. Affected product deployments should be reviewed for potential exposure.

Defensive priority

Medium-priority defensive review recommended due to local attack vector and potential for script injection.

Recommended defensive actions

• Review and apply vendor-provided security updates for Dell PowerProtect Cyber Recovery
• Conduct local vulnerability assessments to identify potentially affected systems
• Implement compensating controls to limit local access to sensitive systems
• Monitor system logs for potential script injection attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

Evidence from official CVE Program record and NIST NVD detail page supports the existence of the vulnerability in Dell PowerProtect Cyber Recovery versions prior to 20.3. The CVE record was published on 2026-08-26T20:18:14.263Z and has not been modified since then. However, defenders should verify the affected scope and apply necessary security updates. Limited source detail is provided, and further review is recommended.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.