CVE-2025-43886mediumCWE-35

CVE-2025-43886: medium-severity vulnerability in Dell PowerProtect Data Manager

Published · Updated

Follow this CVE+ Monitor PowerProtect Data Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.4epss 0.2%
Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected products
Dell · PowerProtect Data Manager
Related CVEs — Dell PowerProtect Data Manager

In the same product, most dangerous first.

CVE-2024-22445HIGHCVE-2024-22445EPSS 1.4%CVE-2026-46737MEDIUMCVE-2026-46737EPSS 0.6%CVE-2024-25971MEDIUMCVE-2024-25971EPSS 0.6%CVE-2024-22454HIGHCVE-2024-22454EPSS 0.6%CVE-2025-43885HIGHCVE-2025-43885EPSS 0.5%CVE-2026-46738CRITICALCVE-2026-46738EPSS 0.5%