CVE-2026-28264

CVE-2026-28264 is an Incorrect Permission Assignment vulnerability affecting Dell PowerProtect Agent Service versions prior to 20.1, which could allow a low-privileged local attacker to gain unauthorized access to sensitive information. The vulnerability carries a low CVSS score of 3.3, requiring local access and low privileges with no user interaction needed, though impact is limited to information disclosure with no effects on system integrity or availability. The vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog and shows no evidence of active exploitation, with minimal community attention reflected in its extremely low EPSS score of 0.00005. The FAUCET risk score of 35.0 suggests this is a lower-priority issue in the overall threat landscape. Organizations running Dell PowerProtect Agent should update to version 20.1 or later as part of routine patch management, though this does not represent an urgent security threat.