Vulnerability Details CVE-2026-74768
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF) vulnerability in the REST API. A high privileged remote attacker could potentially exploit this vulnerability, leading to Information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 30.5%
CVSS Severity
CVSS v3 Score 4.1
Products affected by CVE-2026-74768
-
cpe:2.3:a:dell:powerprotect_data_manager:-
-
cpe:2.3:a:dell:powerprotect_data_manager:1.0
-
cpe:2.3:a:dell:powerprotect_data_manager:1.1
-
cpe:2.3:a:dell:powerprotect_data_manager:19.1
-
cpe:2.3:a:dell:powerprotect_data_manager:19.10
-
cpe:2.3:a:dell:powerprotect_data_manager:19.11
-
cpe:2.3:a:dell:powerprotect_data_manager:19.12
-
cpe:2.3:a:dell:powerprotect_data_manager:19.13
-
cpe:2.3:a:dell:powerprotect_data_manager:19.14
-
cpe:2.3:a:dell:powerprotect_data_manager:19.15
-
cpe:2.3:a:dell:powerprotect_data_manager:19.16
-
cpe:2.3:a:dell:powerprotect_data_manager:19.17
-
cpe:2.3:a:dell:powerprotect_data_manager:19.18
-
cpe:2.3:a:dell:powerprotect_data_manager:19.19
-
cpe:2.3:a:dell:powerprotect_data_manager:19.2
-
cpe:2.3:a:dell:powerprotect_data_manager:19.20
-
cpe:2.3:a:dell:powerprotect_data_manager:19.21
-
cpe:2.3:a:dell:powerprotect_data_manager:19.22
-
cpe:2.3:a:dell:powerprotect_data_manager:19.3
-
cpe:2.3:a:dell:powerprotect_data_manager:19.4
-
cpe:2.3:a:dell:powerprotect_data_manager:19.5
-
cpe:2.3:a:dell:powerprotect_data_manager:19.6
-
cpe:2.3:a:dell:powerprotect_data_manager:19.7
-
cpe:2.3:a:dell:powerprotect_data_manager:19.8
-
cpe:2.3:a:dell:powerprotect_data_manager:19.9
-
cpe:2.3:a:dell:powerprotect_data_manager:2.0
-
cpe:2.3:a:dell:powerprotect_data_manager:2.1
-
cpe:2.3:a:dell:powerprotect_data_manager:20.1.0.0