medium6.5
CVE-2026-49809
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vuln…
Impact
Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Powerprotect Cyber Recovery | before 20.3.0.0 |