CVE-2026-74768: Dell Powerprotect Data Manager

Medium severity, CVSS 4.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.

Affected products

• Dell Powerprotect Data Manager: before 20.3.0.0 (fixed in 20.3.0.0)

Published 2026-09-03. Last modified 2026-09-03.