Description
Dell Avamar Server and Avamar Virtual Edition, versions prior to 19.10 SP1 with CHF338912, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Security. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary file delete.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Avamar Server | 19.9 through 19.10 SP1 – < 19.10 SP1 with CHF 338912 or later | 19.10 SP1 with CHF 338912 or later |
| Dell | Avamar Virtual Edition | 19.9 through 19.10 SP1 – < 19.10 SP1 with CHF 338912 or later | 19.10 SP1 with CHF 338912 or later |
| Dell | PowerProtect DP Series Appliance (IDPA) | N/A – < 2.7.9 with AV CHF 338912 | 2.7.9 with AV CHF 338912 |
Advisories 1
- WID-SEC-2026-0439 Dell Avamar Server und Virtual Edition: Schwachstelle ermöglicht Manipulation von Dateien BSI CERT-Bund (WID) · Feb 17, 2026