Skip to content
OpenAdvisories
High · 8.8 CVE-2026-49499 EUVD-2026-47734GHSA-7fmf-3wmg-8gc9

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. …

Published Jul 22, 2026 · Updated Jul 24, 2026 · Assigned by dell

Description

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected products

VendorProductAffectedFixed
Dell PowerProtect Data Manager < 20.2.0.0 or later 20.2.0.0 or later

References