Dell TechnologiesCVE-2026-49499

Dell PowerProtect Data Manager

CVE-2026-49499 · Published Jul 22, 2026 · updated Jul 29, 2026

High8.8

Fix: upgrade to 20.2.0.0 or later or later

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected versions

Package	Affected	Fixed in
PowerProtect Data Manager Product	< 20.2.0.0 or later	20.2.0.0 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-1270

More Dell Technologies advisories

All Dell Technologies

Medium 6.7Jul 22

Dell Technologies PowerProtect Data Manager: improper input validationCVE-2026-46737fixed in 20.2.0.0 or later Critical 9.1Jul 22

Dell Technologies PowerProtect Data Manager: improper input validationCVE-2026-46738fixed in 20.2.0.0 or later Medium 6.0Jul 22

Dell Technologies PowerProtect Data Manager: information disclosureCVE-2026-44276fixed in 20.2.0.0 or later Critical 9.1Jul 22

Dell Technologies PowerProtect Data Manager: improper input validationCVE-2026-40712fixed in 20.2.0.0 or later High 7.2Jul 22

Dell Technologies PowerProtect Data Manager: improper input validationCVE-2026-40714fixed in 20.2.0.0 or later Medium 6.1Jul 15

Dell Technologies ThinOS 10: protection mechanism failureCVE-2026-56087fixed in 2605_10.2100