CVE-2026-74769

MEDIUM 6.5CVE-2026-74769 · Published 03/09/2026 · updated 14/10/2026

In short

CVE-2026-74769 is a MEDIUM (CVSS 6.5) vulnerability affecting powerprotect data manager (dell).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
powerprotect data manager dell	`≤ 20.2`	No fix yet

Description

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass.

References

dell.com/support/kbdoc/en-us/000501452/dsa-2026-368-security-update-for-dell-powerprotect-data-manager-multiple-vulnerabilities · Vendor Advisory

More vulnerabilities in powerprotect data manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

powerprotect data manager

dell

≤ 20.2

No fix yet

More vulnerabilities in powerprotect data manager

See all →