PT-2026-20302 · Dell · Avamar Virtual Edition+1

Published 2026-02-17 · Updated 2026-03-09 · CVE-2026-22762

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Avamar Server and Avamar Virtual Edition versions prior to 19.10 SP1 with CHF338912

Description The software contains an improper limitation of a pathname to a restricted directory, referred to as a 'Path Traversal' issue. A high-privileged attacker with remote access could potentially exploit this, leading to arbitrary file deletion.

Recommendations Update to version 19.10 SP1 with CHF338912 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-22762

Affected Products

Avamar Server

Avamar Virtual Edition

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-22762 · Security Note
• https://dell.com/support/kbdoc/en-us/000425796/dsa-2026-053-security-update-for-dell-avamar-server-and-dell-avamar-virtual-edition-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability · Vendor Advisory
• https://twitter.com/CVEnew/status/2031137199236985171 · Twitter Post