CVE-2026-44276

Published: Jul 22, 2026Modified: Jul 29, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Affected (1)

Products: Dell: Powerprotect Data Manager

1 product

Powerprotect Data Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Powerprotect Data Manager	Before 20.2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://www.dell.com/support/kbdoc/en-us/000488847/dsa-2026-287-security-update-dell-powerprotect-data-manager-for-multiple-security-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.