BaselineWatch
Desk

CVE-2026-74768

4.1 medium SSVC exploitation: none Analyzed

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 4.1 · dellNVD modified 2026-10-14 23:45

Affected (CPE criteria) 1

  • cpe:2.3:a:dell:powerprotect_data_manager:*:*:*:*:*:*:*:*

References 1