CVE-2026-23773

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-29 · updated 2026-07-25
Weakness: CWE-918

Description

Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

Affected products

Dell Disk Library for mainframe DLm2700: before 7.0.1.0 or later — fixed in 7.0.1.0 or later
Dell Disk Library for mainframe DLm8700: before 7.0.1.0 or later — fixed in 7.0.1.0 or later

How to fix

Upgrade to a fixed version: Dell Disk Library for mainframe DLm2700 7.0.1.0 or later; Dell Disk Library for mainframe DLm8700 7.0.1.0 or later. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000458131/dsa-2026-091-security-update-for-dell-disk-library-for-mainframe-vulnerabilities?lang=en

Get alerted when CVE-2026-23773 or the next vulnerability affects your stack