← Database

CVE-2026-40712

CRITICAL CVSS: 9.1 Published: 2026-07-22 Modified: 2026-07-29

Description

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected Platforms

Dell Powerprotect Data Manager

Weakness Type

CWE-20

References