CVE-2026-23772: Privilege Escalation in Dell Storage Manager

Successful exploitation of CVE-2026-23772 could grant an attacker unauthorized access to sensitive data and system resources. An attacker could leverage this privilege escalation to gain administrative control over the affected server, potentially leading to data breaches, system compromise, and disruption of services. The impact is particularly concerning in environments where Dell Storage Manager is used to manage critical storage infrastructure, as a compromised system could impact data integrity and availability across the organization. While the vulnerability requires local access, this could be achieved through physical access or by exploiting other vulnerabilities to gain a foothold on the system.

1. Reserved2026-01-16
2. Published2026-04-16
3. Modified2026-04-17
4. EPSS updated2026-04-23

The primary mitigation for CVE-2026-23772 is to upgrade Dell Storage Manager - Replay Manager for Microsoft Servers to version 8.0.3 or later. If an immediate upgrade is not feasible, consider implementing stricter access controls to limit the potential impact of a successful attack. Review user permissions and ensure that only authorized personnel have local access to the server. Implement robust monitoring and auditing to detect any suspicious activity. While a direct WAF rule is unlikely, consider network segmentation to limit lateral movement if the system is compromised.