← Database

CVE-2026-49499

HIGH CVSS: 8.8 Published: 2026-07-22 Modified: 2026-07-29

Description

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected Platforms

Dell Powerprotect Data Manager

Weakness Type

CWE-1270

References