Skip to content
Sign in
6.5 Medium

CVE-2026-49809 Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used…

Description

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Affected products and versions

Product Affected versions Fixed in
Power Protect Cyber Recovery 20.3 earliest → < 20.3.0.0 20.3.0.0
Cyber Recovery Versions not published

Other CVEs of Power Protect Cyber Recovery

The 3 CVEs of Power Protect Cyber Recovery →
CVE-2026-79938 Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability 7.6 High CVE-2026-79939 Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following… 5.8 Medium
Track this CVE