CVE-2026-49810 — Dell / Command Powershell Provider (DCPP)

CVE-2026-49810

Dell / Command Powershell Provider (DCPP) PUBLISHED

Description (CNA)

Dell Command Powershell Provider (DCPP), versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Affected (CNA)

Vendor / product	Versions
Dell / Command Powershell Provider (DCPP)	affected 0 before 2.10.2

CWE

CWE-532

References

https://www.dell.com/support/kbdoc/en-us/000502472/dsa-2026-379-security-update-for-dell-command-powershell-provider-dcpp-for-a-credential-theft-via-powershell-event-log-vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.