CVE-2026-73600
Undergoing Analysis Undergoing Analysis - In Progress

Stack Buffer Overflow in Dell PowerProtect Data Manager

Vulnerability report for CVE-2026-73600, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-03

Last updated on: 2026-09-04

Assigner: Dell

Description

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level restore agent. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-04
Generated
2026-09-10
AI Q&A
2026-09-03
EPSS Evaluated
2026-09-09
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell powerprotect_data_manager to 20.2.0.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell PowerProtect Data Manager versions 20.2.0.0 and below have a stack buffer overflow vulnerability in the file-level restore agent. This flaw allows a high privileged remote attacker to potentially exploit it, resulting in information disclosure.

Detection Guidance

No specific detection commands are provided in the available context for CVE-2026-73600. Focus on monitoring for unusual activity in Dell PowerProtect Data Manager logs and network traffic involving file-level restore operations.

Impact Analysis

An attacker could exploit this to disclose sensitive information. The vulnerability requires high privileges but could lead to unauthorized access to confidential data if exploited.

Compliance Impact

The vulnerability could lead to information disclosure, which may violate data protection requirements under GDPR and HIPAA if sensitive data is exposed. Compliance risks include unauthorized access to personal or health data, potentially resulting in regulatory penalties.

Mitigation Strategies

Update Dell PowerProtect Data Manager to versions above 20.2.0.0 to address the stack buffer overflow vulnerability in the file-level restore agent.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73600. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart