Critical Alert 4 Active Exploits Detected Today

CVE-2026-60137 WordPress Core SQL Injection Vulnerability →
CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability →
CVE-2026-0770 Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability →
CVE-2021-27137 DD-WRT Stack-Based Buffer Overflow Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower


← Back to CVE List

CVE-2026-46738NVD

Vulnerability Summary

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Severity Level
CRITICAL(9.1)
Published Date
Jul 22, 2026
Last Modified
Jul 22, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh