CVE-2026-40714 is an improper input validation vulnerability in Dell PowerProtect Data Manager before version 20.2.0.0. An attacker with high privileges and remote access could exploit this flaw to gain elevated privileges. The vulnerability is categorized under CWE-20 and has a CVSS 3.1 base score of 7.2, reflecting high impact on confidentiality, integrity, and availability. No official patch or remediation level has been disclosed yet, and no known exploits are reported in the wild.

Successful exploitation could lead to elevation of privileges by a high privileged remote attacker, potentially compromising confidentiality, integrity, and availability of the affected system. The CVSS vector indicates network attack vector, low attack complexity, no user interaction required, and unchanged scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to trusted users with high privileges and monitor for suspicious activity related to privilege escalation attempts.