CVE-2026-74774: CWE-295: Improper Certificate Validation in Dell PowerProtect One

CVE-2026-74774 describes an improper certificate validation vulnerability in Dell PowerProtect One software versions 20.1.0.0 and earlier. This vulnerability allows an unauthenticated attacker with remote access to potentially bypass security protections by exploiting the certificate validation weakness. The CVSS 3.1 base score is 5.9, indicating medium severity, with network attack vector, high attack complexity, no privileges required, no user interaction, and impact limited to confidentiality. No known exploits are reported in the wild, and no vendor remediation or patch has been disclosed at this time.

An unauthenticated remote attacker could exploit the improper certificate validation to bypass protection mechanisms in Dell PowerProtect One. This could lead to unauthorized access to sensitive information or systems protected by the software. The impact is limited to confidentiality compromise; integrity and availability are not affected according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigation steps are provided by the vendor at this time.