8.8
High
CVE-2026-49499 Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens…
Description
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerProtect Data Manager | Versions not published |
Other CVEs of PowerProtect Data Manager
The 27 CVEs of PowerProtect Data Manager →
CVE-2026-73600
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level…
7.8
High
CVE-2026-68860
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability
6.8
Medium
CVE-2026-74769
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the…
6.5
Medium
CVE-2026-74768
Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (SSRF)…
4.1
Medium