6.5
Medium
CVE-2026-74769 Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the…
Description
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerProtect Data Manager 20.3 | earliest → < 20.3.0.0 | 20.3.0.0 |
Other CVEs of PowerProtect Data Manager
The 27 CVEs of PowerProtect Data Manager →
CVE-2026-73600
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level…
7.8
High
CVE-2026-68860
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability
6.8
Medium
CVE-2026-74768
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF)…
4.1
Medium
CVE-2026-46737
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the…
6.7
Medium