{"schema_version":1,"title":"Dell PowerProtect Data Manager vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Dell PowerProtect Data Manager: 0 in the last 7 days and 10 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-74769, was published on 3 September 2026.","url":"https://junglewise.ai/threats/technologies/powerprotect-data-manager","json_url":"https://junglewise.ai/threats/technologies/powerprotect-data-manager.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/powerprotect-data-manager","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":11,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":4,"last_90_days":10,"last_365_days":11},"latest":[{"cve":"CVE-2026-74769","cvss":6.5,"epss":0.0041,"slug":"cve-2026-74769-dell-powerprotect-data-manager-incorrect-authorization-in-rest","title":"Dell PowerProtect Data Manager incorrect authorization in REST API","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:07.447+00:00","url":"https://junglewise.ai/threats/cve-2026-74769-dell-powerprotect-data-manager-incorrect-authorization-in-rest"},{"cve":"CVE-2026-74768","cvss":4.1,"epss":0.0036,"slug":"cve-2026-74768-dell-powerprotect-data-manager-ssrf-in-rest-api","title":"Dell PowerProtect Data Manager SSRF in REST API","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:07.307+00:00","url":"https://junglewise.ai/threats/cve-2026-74768-dell-powerprotect-data-manager-ssrf-in-rest-api"},{"cve":"CVE-2026-73600","cvss":7.8,"epss":0.002,"slug":"cve-2026-73600-dell-powerprotect-data-manager-stack-buffer-overflow-in-file","title":"Dell PowerProtect Data Manager stack buffer overflow in file-level restore agent","severity":"high","exploited":false,"published_at":"2026-09-03T13:06:03.427+00:00","url":"https://junglewise.ai/threats/cve-2026-73600-dell-powerprotect-data-manager-stack-buffer-overflow-in-file"},{"cve":"CVE-2026-68860","cvss":6.8,"epss":0.0038,"slug":"cve-2026-68860-dell-powerprotect-data-manager-information-disclosure-via-memory","title":"Dell PowerProtect Data Manager information disclosure via memory layout reliance","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:01.48+00:00","url":"https://junglewise.ai/threats/cve-2026-68860-dell-powerprotect-data-manager-information-disclosure-via-memory"},{"cve":"CVE-2026-49499","cvss":8.8,"slug":"cve-2026-49499-dell-powerprotect-data-manager-privilege-escalation-in-iam","title":"Dell PowerProtect Data Manager privilege escalation in IAM","severity":"high","exploited":false,"published_at":"2026-07-22T16:17:29.943+00:00","url":"https://junglewise.ai/threats/cve-2026-49499-dell-powerprotect-data-manager-privilege-escalation-in-iam"},{"cve":"CVE-2026-46738","cvss":9.1,"slug":"cve-2026-46738-dell-powerprotect-data-manager-privilege-escalation-in-rest-api","title":"Dell PowerProtect Data Manager privilege escalation in REST API","severity":"critical","exploited":false,"published_at":"2026-07-22T16:17:24.223+00:00","url":"https://junglewise.ai/threats/cve-2026-46738-dell-powerprotect-data-manager-privilege-escalation-in-rest-api"},{"cve":"CVE-2026-46737","cvss":6.7,"slug":"cve-2026-46737-dell-powerprotect-data-manager-remote-execution-in-rest-api","title":"Dell PowerProtect Data Manager remote execution in REST API","severity":"medium","exploited":false,"published_at":"2026-07-22T16:17:24.093+00:00","url":"https://junglewise.ai/threats/cve-2026-46737-dell-powerprotect-data-manager-remote-execution-in-rest-api"},{"cve":"CVE-2026-44276","cvss":6,"slug":"cve-2026-44276-dell-powerprotect-data-manager-information-exposure-in-rest-api","title":"Dell PowerProtect Data Manager information exposure in REST API","severity":"medium","exploited":false,"published_at":"2026-07-22T16:17:22.593+00:00","url":"https://junglewise.ai/threats/cve-2026-44276-dell-powerprotect-data-manager-information-exposure-in-rest-api"},{"cve":"CVE-2026-40714","cvss":7.2,"slug":"cve-2026-40714-dell-powerprotect-data-manager-privilege-escalation-via-improper","title":"Dell PowerProtect Data Manager privilege escalation via improper input validation","severity":"high","exploited":false,"published_at":"2026-07-22T16:17:19.423+00:00","url":"https://junglewise.ai/threats/cve-2026-40714-dell-powerprotect-data-manager-privilege-escalation-via-improper"},{"cve":"CVE-2026-40712","cvss":9.1,"slug":"cve-2026-40712-dell-powerprotect-data-manager-privilege-escalation-in-rest-api","title":"Dell PowerProtect Data Manager privilege escalation in REST API","severity":"critical","exploited":false,"published_at":"2026-07-22T16:17:19.247+00:00","url":"https://junglewise.ai/threats/cve-2026-40712-dell-powerprotect-data-manager-privilege-escalation-in-rest-api"},{"cve":"CVE-2026-28264","cvss":3.3,"epss":0.0001,"slug":"cve-2026-28264-dell-powerprotect-agent-service-incorrect-permission-assignment","title":"Dell PowerProtect Agent Service incorrect permission assignment","severity":"low","exploited":false,"published_at":"2026-04-08T12:16:21.11+00:00","url":"https://junglewise.ai/threats/cve-2026-28264-dell-powerprotect-agent-service-incorrect-permission-assignment"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":2,"exploited":0,"vulnerabilities":6},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Dell Secure Connect Gateway Appliance","slug":"secure-connect-gateway-appliance","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/secure-connect-gateway-appliance"},{"name":"Dell Secure Connect Gateway Application","slug":"secure-connect-gateway-application","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/secure-connect-gateway-application"},{"name":"Dell Secure Connect Gateway 5.0 Appliance","slug":"secure-connect-gateway-5-0-appliance","vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/secure-connect-gateway-5-0-appliance"},{"name":"Dell Secure Connect Gateway 5.0 Application","slug":"secure-connect-gateway-5-0-application","vulnerabilities":40,"url":"https://junglewise.ai/threats/technologies/secure-connect-gateway-5-0-application"},{"name":"Dell PowerProtect Data Domain","slug":"powerprotect-data-domain","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/powerprotect-data-domain"},{"name":"Dell PowerFlex Manager","slug":"powerflex-manager","vulnerabilities":22,"url":"https://junglewise.ai/threats/technologies/powerflex-manager"},{"name":"Dell OpenManage Server Administrator","slug":"openmanage-server-administrator","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/openmanage-server-administrator"},{"name":"Dell PowerStore","slug":"powerstore","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/powerstore"},{"name":"Dell ThinOS","slug":"thinos","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/thinos"},{"name":"Dell Wyse Management Suite","slug":"wyse-management-suite","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/wyse-management-suite"},{"name":"Dell ObjectScale","slug":"objectscale","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/objectscale"},{"name":"Dell Policy Manager For Secure Connect Gateway","slug":"policy-manager-for-secure-connect-gateway","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/policy-manager-for-secure-connect-gateway"}],"technology":{"hub":true,"name":"Dell PowerProtect Data Manager","slug":"powerprotect-data-manager","vendor":{"name":"Dell","slug":"dell","url":"https://junglewise.ai/threats/vendors/dell"},"aliases":[],"category":"software","homepage":"https://www.dell.com/en-us/dt/data-protection/powerprotect-data-manager.htm","description":"Data protection and management software for backup, recovery, and replication in cloud and on-premises environments.","url":"https://junglewise.ai/threats/technologies/powerprotect-data-manager"},"most_severe":[{"cve":"CVE-2026-46738","cvss":9.1,"slug":"cve-2026-46738-dell-powerprotect-data-manager-privilege-escalation-in-rest-api","title":"Dell PowerProtect Data Manager privilege escalation in REST API","severity":"critical","exploited":false,"published_at":"2026-07-22T16:17:24.223+00:00","url":"https://junglewise.ai/threats/cve-2026-46738-dell-powerprotect-data-manager-privilege-escalation-in-rest-api"},{"cve":"CVE-2026-40712","cvss":9.1,"slug":"cve-2026-40712-dell-powerprotect-data-manager-privilege-escalation-in-rest-api","title":"Dell PowerProtect Data Manager privilege escalation in REST API","severity":"critical","exploited":false,"published_at":"2026-07-22T16:17:19.247+00:00","url":"https://junglewise.ai/threats/cve-2026-40712-dell-powerprotect-data-manager-privilege-escalation-in-rest-api"},{"cve":"CVE-2026-49499","cvss":8.8,"slug":"cve-2026-49499-dell-powerprotect-data-manager-privilege-escalation-in-iam","title":"Dell PowerProtect Data Manager privilege escalation in IAM","severity":"high","exploited":false,"published_at":"2026-07-22T16:17:29.943+00:00","url":"https://junglewise.ai/threats/cve-2026-49499-dell-powerprotect-data-manager-privilege-escalation-in-iam"},{"cve":"CVE-2026-73600","cvss":7.8,"epss":0.002,"slug":"cve-2026-73600-dell-powerprotect-data-manager-stack-buffer-overflow-in-file","title":"Dell PowerProtect Data Manager stack buffer overflow in file-level restore agent","severity":"high","exploited":false,"published_at":"2026-09-03T13:06:03.427+00:00","url":"https://junglewise.ai/threats/cve-2026-73600-dell-powerprotect-data-manager-stack-buffer-overflow-in-file"},{"cve":"CVE-2026-40714","cvss":7.2,"slug":"cve-2026-40714-dell-powerprotect-data-manager-privilege-escalation-via-improper","title":"Dell PowerProtect Data Manager privilege escalation via improper input validation","severity":"high","exploited":false,"published_at":"2026-07-22T16:17:19.423+00:00","url":"https://junglewise.ai/threats/cve-2026-40714-dell-powerprotect-data-manager-privilege-escalation-via-improper"},{"cve":"CVE-2026-68860","cvss":6.8,"epss":0.0038,"slug":"cve-2026-68860-dell-powerprotect-data-manager-information-disclosure-via-memory","title":"Dell PowerProtect Data Manager information disclosure via memory layout reliance","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:01.48+00:00","url":"https://junglewise.ai/threats/cve-2026-68860-dell-powerprotect-data-manager-information-disclosure-via-memory"},{"cve":"CVE-2026-46737","cvss":6.7,"slug":"cve-2026-46737-dell-powerprotect-data-manager-remote-execution-in-rest-api","title":"Dell PowerProtect Data Manager remote execution in REST API","severity":"medium","exploited":false,"published_at":"2026-07-22T16:17:24.093+00:00","url":"https://junglewise.ai/threats/cve-2026-46737-dell-powerprotect-data-manager-remote-execution-in-rest-api"},{"cve":"CVE-2026-74769","cvss":6.5,"epss":0.0041,"slug":"cve-2026-74769-dell-powerprotect-data-manager-incorrect-authorization-in-rest","title":"Dell PowerProtect Data Manager incorrect authorization in REST API","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:07.447+00:00","url":"https://junglewise.ai/threats/cve-2026-74769-dell-powerprotect-data-manager-incorrect-authorization-in-rest"},{"cve":"CVE-2026-44276","cvss":6,"slug":"cve-2026-44276-dell-powerprotect-data-manager-information-exposure-in-rest-api","title":"Dell PowerProtect Data Manager information exposure in REST API","severity":"medium","exploited":false,"published_at":"2026-07-22T16:17:22.593+00:00","url":"https://junglewise.ai/threats/cve-2026-44276-dell-powerprotect-data-manager-information-exposure-in-rest-api"},{"cve":"CVE-2026-74768","cvss":4.1,"epss":0.0036,"slug":"cve-2026-74768-dell-powerprotect-data-manager-ssrf-in-rest-api","title":"Dell PowerProtect Data Manager SSRF in REST API","severity":"medium","exploited":false,"published_at":"2026-09-03T13:06:07.307+00:00","url":"https://junglewise.ai/threats/cve-2026-74768-dell-powerprotect-data-manager-ssrf-in-rest-api"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}