Dell TechnologiesCVE-2026-46737

Dell Technologies PowerProtect Data Manager: improper input validation

CVE-2026-46737 · Published Jul 22, 2026 · updated Jul 29, 2026

Medium6.7

Fix: upgrade to 20.2.0.0 or later or later

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

Affected versions

Package	Affected	Fixed in
PowerProtect Data Manager Product	< 20.2.0.0 or later	20.2.0.0 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-20

More Dell Technologies advisories

All Dell Technologies

High 8.8Jul 22

Dell PowerProtect Data ManagerCVE-2026-49499fixed in 20.2.0.0 or later Critical 9.1Jul 22

Dell Technologies PowerProtect Data Manager: improper input validationCVE-2026-46738fixed in 20.2.0.0 or later Medium 6.0Jul 22

Dell Technologies PowerProtect Data Manager: information disclosureCVE-2026-44276fixed in 20.2.0.0 or later Critical 9.1Jul 22

Dell Technologies PowerProtect Data Manager: improper input validationCVE-2026-40712fixed in 20.2.0.0 or later High 7.2Jul 22

Dell Technologies PowerProtect Data Manager: improper input validationCVE-2026-40714fixed in 20.2.0.0 or later Medium 6.1Jul 15

Dell Technologies ThinOS 10: protection mechanism failureCVE-2026-56087fixed in 2605_10.2100