6.5
Moyenne
CVE-2026-49809 Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used…
Description
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Power Protect Cyber Recovery 20.3 | premières → < 20.3.0.0 | 20.3.0.0 |
| Cyber Recovery | Versions non publiées |