Quick answers
- Is CVE-2026-73600 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-73600 being exploited in the wild.
- How severe is CVE-2026-73600?
- High severity, with a CVSS score of 7.8, published 3 September 2026.
- Which products and versions are affected?
- Dell Powerprotect Data Manager 20.2.0.0 and below.
- Is there a fix for CVE-2026-73600?
- A patch was published on 2026-08-24: Patch version 20.3.0.0 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-73600 attacked?
- It is attacked with local access.
- Am I affected by CVE-2026-73600?
- Check whether you run Dell Powerprotect Data Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
CVE-2026-73600 is a stack buffer overflow vulnerability in the file-level restore agent component of Dell PowerProtect Data Manager versions 20.2.0.0 and below. The vulnerability requires local or adjacent network access and a user with low-level privileges to exploit. An attacker with these credentials can trigger the buffer overflow condition, potentially leading to information disclosure, denial of service, or code execution. The CVSS 3.1 vector (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates local attack surface with low complexity. Dell has released patched version 20.3.0.0 to address this and related vulnerabilities.
Affected products
- Dell PowerProtect Data Manager 20.2.0.0 and below
Timeline
- 2026-09-03: disclosed
- 2026-08-24: patched: Patch version 20.3.0.0 released