CVE-2026-74768 Dell CVE debrief

Who should care

Administrators and users of Dell PowerProtect Data Manager, version 20.2.0.0 and below, should review and apply the vendor-provided security updates to prevent potential exploitation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to assess the impact of the vulnerability and take necessary actions to protect their systems.

Technical summary

The Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure. The vulnerability is considered medium priority due to the potential for information disclosure and the requirement for high privileges to exploit. The REST API is impacted, and defenders should review and apply vendor-provided security updates, monitor system logs for suspicious activity, and restrict access to the REST API.

Defensive priority

Medium priority due to the potential for information disclosure and the requirement for high privileges to exploit.

Recommended defensive actions

• Review and apply vendor-provided security updates
• Monitor system logs for suspicious activity
• Restrict access to the REST API
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further investigation is needed to determine the full scope of the vulnerability and potential impact. The vulnerability affects Dell PowerProtect Data Manager, versions 20.2.0.0 and below. The REST API is impacted, and a high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure. Evidence is limited, and defenders should verify affected product deployments, review official advisories, and monitor system logs for suspicious activity.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.