CVE-2026-49499
High · 8.8CVSS
8.8
EPSS
0.4%
Published
Jul 22, 2026
CISA due date
—
The record
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19636 An issue was identified in which CSRF tokens were generated using a predictable method… CWE-1270
- CVE-2026-54593 Pterodactyl is a free, open-source game server management panel. CWE-1270
- CVE-2025-59698 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… CWE-1270