Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-49809

SQL Injection Vulnerability in Dell PowerProtect Cyber Recovery Allowing Information Disclosure

Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Cyber Recovery Powerprotect Cyber Recovery
CVE-2026-79939

Symbolic‑Link Following in Dell PowerProtect Cyber Recovery Enables Script Injection

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.

CVSS 3.1 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Cyber Recovery Powerprotect Cyber Recovery
CVE-2026-79938

Improper Authentication Allows Unauthorized Access in Dell PowerProtect Cyber Recovery

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Dell
Products
Cyber Recovery Powerprotect Cyber Recovery