CVE-2026-23773
Received Received - Intake

Server-Side Request Forgery in Dell DLm

Publication date: 2026-04-29

Last updated on: 2026-04-29

Assigner: Dell

Description
Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-04-29
Last Modified
2026-04-29
Generated
2026-07-06
AI Q&A
2026-04-29
EPSS Evaluated
2026-07-05
NVD
CVE-2026-23773
EUVD
EUVD-2026-26190

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell disk_library_for_mainframe 8700
dell disk_library_for_mainframe 2700

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) found in Dell Disk Library for Mainframe versions DLm 8700/2700. It allows a low privileged attacker with remote access to potentially exploit the system by making unauthorized requests from the server side.

Impact Analysis

Exploitation of this SSRF vulnerability could allow an attacker to make unauthorized requests from the affected server, potentially accessing internal resources or services that are not directly exposed to the attacker. This could lead to information disclosure or other indirect impacts depending on the internal network configuration.

Executive Summary

This vulnerability is a Server-Side Request Forgery (SSRF) found in Dell Disk Library for Mainframe versions DLm 8700/2700. It allows a low privileged attacker with remote access to potentially exploit the system by making the server perform unauthorized requests on their behalf.

Impact Analysis

Exploitation of this SSRF vulnerability could allow an attacker to make the affected server send requests to internal or external systems, potentially leading to unauthorized information disclosure or interaction with internal services that are not directly accessible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23773. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart