Dell Storage Manager - Replay Manager for Microsoft Servers, version(s) 8.0, enthalten (Improper Privilege Management) eine Schwachstelle. Ein Angreifer mit geringen Rechten und lokalem Zugriff könnte potenziell ex

Successful exploitation of CVE-2026-23772 could grant an attacker significantly elevated privileges within the affected system. This could enable them to read, modify, or delete sensitive data, install malicious software, or even take complete control of the server. The local access requirement limits the immediate scope of the attack, but a compromised user account with local access could be leveraged to escalate privileges and gain broader control. The impact is particularly concerning in environments where Dell Storage Manager manages critical data or infrastructure.

Organizations heavily reliant on Dell Storage Manager - Replay Manager for Microsoft Servers to manage their storage infrastructure are at significant risk. Environments with lax access controls or limited physical security are particularly vulnerable. Shared hosting environments where multiple users share the same server could also be affected.

• linux / server:

journalctl -u dell-storage-manager | grep -i privilege
ps aux | grep -i replay_manager

• generic web: Check for unusual processes running with elevated privileges using ps aux and compare against known Dell Storage Manager processes.

1. 2026-04-16Disclosure

   disclosure

1. Reserviert2026-01-16
2. Veröffentlicht2026-04-16
3. Geändert2026-04-17
4. EPSS aktualisiert2026-04-23

The primary mitigation for CVE-2026-23772 is to upgrade Dell Storage Manager - Replay Manager for Microsoft Servers to version 8.0.3 or later. If an immediate upgrade is not feasible, consider restricting local access to the system to only authorized personnel. Implement strong password policies and multi-factor authentication to further reduce the risk of unauthorized access. Monitor system logs for suspicious activity that might indicate exploitation attempts. After upgrade, confirm the fix by attempting to execute commands with a low-privileged user account to verify privilege escalation is prevented.