Is CVE-2026-28264 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-28264 being exploited in the wild.

How severe is CVE-2026-28264?

Low severity, with a CVSS score of 3.3, published 8 April 2026.

Which products and versions are affected?

Dell PowerProtect Agent Service prior to 20.1; Dell Powerprotect Data Manager prior to 20.1.0.0.

Is there a fix for CVE-2026-28264?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-28264 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-28264?

Check whether you run Dell PowerProtect Agent Service or Dell Powerprotect Data Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-28264: Dell PowerProtect Agent Service incorrect permission assignment

CVE-2026-28264 · Severity: low · CVSS 3.3 · Published 2026-04-08

Dell PowerProtect Data Manager is a backup and recovery solution used to protect enterprise data. A vulnerability in the Agent Service component could allow a user with low-level access to the local system to view sensitive information that should normally be restricted. This could lead to the exposure of configuration details or other internal data, though it does not directly allow for system takeover or data deletion.

Technologies: Dell Powerprotect Data Manager. Vendors: Dell.

Quick answers

Is CVE-2026-28264 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-28264 being exploited in the wild.
How severe is CVE-2026-28264?: Low severity, with a CVSS score of 3.3, published 8 April 2026.
Which products and versions are affected?: Dell PowerProtect Agent Service prior to 20.1; Dell Powerprotect Data Manager prior to 20.1.0.0.
Is there a fix for CVE-2026-28264?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-28264 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-28264?: Check whether you run Dell PowerProtect Agent Service or Dell Powerprotect Data Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Dell PowerProtect Agent Service (versions prior to 20.1) suffers from an incorrect permission assignment (CWE-732) for a critical resource. This vulnerability allows a local, authenticated attacker with low privileges to access resources that should be restricted to higher-privileged accounts or the system itself. Successful exploitation results in unauthorized information exposure. The issue is addressed in Dell PowerProtect Data Manager version 20.1.0.0 and later.

Affected products

Dell PowerProtect Data Manager prior to 20.1.0.0
Dell PowerProtect Agent Service prior to 20.1

Timeline

2026-04-01: advisory: Initial release of DSA-2026-158 by Dell
2026-04-08: disclosed: NVD publication date
2026-04-14: other: Last modified date for the Dell advisory

References

https://www.dell.com/support/kbdoc/en-us/000447277/dsa-2026-158-security-update-dell-powerprotect-data-manager-for-multiple-security-vulnerabilities

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.