Is CVE-2026-40712 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-40712?

CVE-2026-40712 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-40712

Description

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.