Reliance on Data/Memory Layout Vulnerability in Dell PowerProtect Data Manager
CVE-2026-68860

6.8MEDIUM

Key Information:

Vendor

Dell
Status
Powerprotect Data Manager
Vendor
CVE Published:
3 September 2026

What is CVE-2026-68860?

The Dell PowerProtect Data Manager software is susceptible to a vulnerability that allows an unauthenticated remote attacker to exploit data or memory layout weaknesses. This exploitation could enable the attacker to carry out phishing attacks, posing a significant risk to data integrity and security for users. Versions 20.2.0.0 and below are affected, necessitating an urgent review and deployment of security measures to mitigate potential threats.

Affected Version(s)

PowerProtect Data Manager 0 < 20.3.0.0

References

https://www.dell.com/support/kbdoc/en-us/000501452/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.