CVE-2026-73600: CWE-121: Stack-based Buffer Overflow in Dell PowerProtect Data Manager

CVE-2026-73600 is a stack-based buffer overflow vulnerability (CWE-121) found in Dell PowerProtect Data Manager's file-level restore agent affecting versions 20.2.0.0 and earlier. A remote attacker with high privileges could exploit this flaw to disclose sensitive information. The vulnerability has a CVSS 3.1 base score of 7.8 with attack vector local, low attack complexity, low privileges required, no user interaction, and impacts confidentiality, integrity, and availability. There is no vendor advisory or patch currently available to address this issue.

Successful exploitation of this vulnerability could lead to disclosure of sensitive information, as well as potential integrity and availability impacts due to the buffer overflow. The attacker must have high privileges and local access to exploit the vulnerability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected components to trusted users with high privileges to reduce risk.