What is the CVSS score of CVE-2026-23772?

CVE-2026-23772 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Dell are affected by CVE-2026-23772?

Dell Storage Manager - Replay Manager for Microsoft Servers 8.0 contains a local privilege escalation vulnerability (CVE-2026-23772) that allows authenticated users with low privileges to gain…. A patch is available.

How to fix or mitigate CVE-2026-23772?

Within 24 hours: Identify all systems running Dell Storage Manager - Replay Manager for Microsoft Servers 8.0 using asset inventory and network scanning. Within 7 days: Apply the vendor patch released in security advisory DSA-2026-058 to affected systems; prioritize production backup infrastructure. Within 30 days: Complete patch deployment across all instances and conduct post-patch validation of backup operations and access controls.

Dell CVE-2026-23772

EUVD-2026-23217 HIGH

Improper Privilege Management (CWE-269)

2026-04-16 dell

GHSA-c2m4-xc4p-9x32

Privilege Escalation Dell Microsoft

7.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Apr 17, 2026 - 15:17 nvd

Patch available

Apr 16, 2026 - 10:01 EUVD

Re-analysis Queued

Apr 16, 2026 - 09:22 vuln.today

cvss_changed

Analysis Generated

Apr 16, 2026 - 09:11 vuln.today

EUVD ID Assigned

Apr 16, 2026 - 09:00 euvd

EUVD-2026-23217

Analysis Generated

Apr 16, 2026 - 09:00 vuln.today

CVE Published

Apr 16, 2026 - 08:30 nvd

HIGH 7.3

DescriptionCVE.org

Dell Storage Manager - Replay Manager for Microsoft Servers, version(s) 8.0, contain(s) an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

AnalysisAI

Local privilege escalation in Dell Storage Manager - Replay Manager for Microsoft Servers 8.0 allows low-privileged authenticated users to gain elevated privileges with high integrity and availability impact. Dell has released security advisory DSA-2026-058 with patches. The CVSS 7.3 (High) score reflects significant post-exploitation impact, though local access and existing authentication requirements limit initial attack surface. No active exploitation (CISA KEV) or public proof-of-concept code identified at time of analysis.

Technical ContextAI

Dell Storage Manager - Replay Manager is an enterprise storage snapshot and replication management solution for Microsoft Windows environments. CWE-269 (Improper Privilege Management) indicates the software fails to properly restrict or validate privilege-granting operations, allowing authenticated local users to manipulate permissions, access tokens, or service configurations to escalate from low-privileged user context to higher privileges (potentially SYSTEM or Administrator). The affected CPE (cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*) confirms this is a Dell-branded application vulnerability rather than an operating system or third-party library issue. Version 8.0 is specifically identified as vulnerable, suggesting this may be a design or implementation flaw in privilege boundary enforcement within the Replay Manager component's Windows service or COM interfaces.

RemediationAI

Apply the security update provided in Dell Security Advisory DSA-2026-058 available at https://www.dell.com/support/kbdoc/en-us/000453020/dsa-2026-058-security-update-for-dell-storage-manager-replay-manager-for-microsoft-servers-vulnerabilities. Dell's advisory should contain download links, specific patched version numbers, and installation instructions for Dell Storage Manager - Replay Manager. Until patching is feasible, implement defense-in-depth controls: restrict local logon rights on servers running Replay Manager to only essential administrative accounts using Group Policy (Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > 'Allow log on locally'), enable Enhanced Mitigation Experience Toolkit (EMET) or Windows Defender Exploit Guard to constrain privilege escalation techniques, audit and monitor privilege use events (Windows Event ID 4672, 4673, 4674) for anomalous elevation attempts, and segment storage management servers from general user access networks. Note these mitigations do not eliminate the vulnerability but reduce attack surface and increase detection likelihood. Organizations using Dell Storage Manager in production storage environments should prioritize patching during the next maintenance window given the potential for post-compromise lateral movement.