CVE-2026-74769: Dell Powerprotect Data Manager

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Affected products

• Dell Powerprotect Data Manager: before 20.3.0.0 (fixed in 20.3.0.0)

Published 2026-09-03. Last modified 2026-09-05.