PT-2026-20302 · Dell · Avamar Virtual Edition+1

CVE-2026-22762 · Publicado 2026-02-17 · Atualizado 2026-03-09

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Avamar Server and Avamar Virtual Edition versions prior to 19.10 SP1 with CHF338912

Description The software contains an improper limitation of a pathname to a restricted directory, referred to as a 'Path Traversal' issue. A high-privileged attacker with remote access could potentially exploit this, leading to arbitrary file deletion.

Recommendations Update to version 19.10 SP1 with CHF338912 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-22762

Produtos afetados

Avamar Server

Avamar Virtual Edition

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-22762 · Nota de Segurança
• https://twitter.com/CVEnew/status/2031137199236985171 · Publicação no Twitter
• https://dell.com/support/kbdoc/en-us/000425796/dsa-2026-053-security-update-for-dell-avamar-server-and-dell-avamar-virtual-edition-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability · Aviso do Fabricante