CVE-2026-23501 — Dell / RecoverPoint for Virtual Machines

CVE-2026-23501

Dell / RecoverPoint for Virtual Machines PUBLISHED

Description (CNA)

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected (CNA)

Vendor / product	Versions
Dell / RecoverPoint for Virtual Machines	affected 0 before 6.1

CWE

CWE-78

References

https://www.dell.com/support/kbdoc/en-us/000501664/dsa-2026-096-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.