# CVE-2026-28264: Dell PowerProtect Agent Service incorrect permission assignment

Source: https://junglewise.ai/threats/cve-2026-28264-dell-powerprotect-agent-service-incorrect-permission-assignment  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-08. Updated: 2026-06-02  
License: CC BY 4.0 with a link back

CVE-2026-28264 · Severity: low · CVSS 3.3 · Published 2026-04-08

Dell PowerProtect Data Manager is a backup and recovery solution used to protect enterprise data. A vulnerability in the Agent Service component could allow a user with low-level access to the local system to view sensitive information that should normally be restricted. This could lead to the exposure of configuration details or other internal data, though it does not directly allow for system takeover or data deletion.

Technologies: [Dell Powerprotect Data Manager](https://junglewise.ai/threats/technologies/powerprotect-data-manager). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-28264 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-28264 being exploited in the wild.

**How severe is CVE-2026-28264?** Low severity, with a CVSS score of 3.3, published 8 April 2026.

**Which products and versions are affected?** Dell PowerProtect Agent Service prior to 20.1; Dell Powerprotect Data Manager prior to 20.1.0.0.

**Is there a fix for CVE-2026-28264?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-28264 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-28264?** Check whether you run Dell PowerProtect Agent Service or Dell Powerprotect Data Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Dell PowerProtect Agent Service (versions prior to 20.1) suffers from an incorrect permission assignment (CWE-732) for a critical resource. This vulnerability allows a local, authenticated attacker with low privileges to access resources that should be restricted to higher-privileged accounts or the system itself. Successful exploitation results in unauthorized information exposure. The issue is addressed in Dell PowerProtect Data Manager version 20.1.0.0 and later.

## Affected products

- Dell PowerProtect Data Manager prior to 20.1.0.0
- Dell PowerProtect Agent Service prior to 20.1

## Timeline

- 2026-04-01: advisory: Initial release of DSA-2026-158 by Dell
- 2026-04-08: disclosed: NVD publication date
- 2026-04-14: other: Last modified date for the Dell advisory

## References

- [https://www.dell.com/support/kbdoc/en-us/000447277/dsa-2026-158-security-update-dell-powerprotect-data-manager-for-multiple-security-vulnerabilities](https://www.dell.com/support/kbdoc/en-us/000447277/dsa-2026-158-security-update-dell-powerprotect-data-manager-for-multiple-security-vulnerabilities)

## Related threats

- [Dell PowerProtect Data Manager incorrect authorization in REST API](https://junglewise.ai/threats/cve-2026-74769-dell-powerprotect-data-manager-incorrect-authorization-in-rest)
- [Dell PowerProtect Data Manager SSRF in REST API](https://junglewise.ai/threats/cve-2026-74768-dell-powerprotect-data-manager-ssrf-in-rest-api)
- [Dell PowerProtect Data Manager stack buffer overflow in file-level restore agent](https://junglewise.ai/threats/cve-2026-73600-dell-powerprotect-data-manager-stack-buffer-overflow-in-file)
- [Dell PowerProtect Data Manager information disclosure via memory layout reliance](https://junglewise.ai/threats/cve-2026-68860-dell-powerprotect-data-manager-information-disclosure-via-memory)
- [Dell PowerProtect Data Manager privilege escalation in IAM](https://junglewise.ai/threats/cve-2026-49499-dell-powerprotect-data-manager-privilege-escalation-in-iam)