CVE-2026-74769
Received Received - Intake

Incorrect Authorization in Dell PowerProtect Data Manager

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: Dell

Description
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API. A low privileged remote attacker could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-74769
EUVD
EUVD-2026-70327

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell powerprotect_data_manager to 20.2.0.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell PowerProtect Data Manager versions 20.2.0.0 and below have an Incorrect Authorization vulnerability in the REST API. This allows a low-privileged remote attacker to bypass protection mechanisms.

Impact Analysis

A low-privileged attacker could exploit this to bypass security protections, potentially gaining unauthorized access to sensitive data or disrupting backup operations.

Compliance Impact

This vulnerability could lead to unauthorized data access or loss, violating compliance requirements for data protection such as GDPR or HIPAA.

Mitigation Strategies

Update Dell PowerProtect Data Manager to a version beyond 20.2.0.0 to address the Incorrect Authorization vulnerability in the REST API.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74769. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart