PT-2026-22986 · Dell · Device Management Agent

Published 2026-03-04 · Updated 2026-03-04 · CVE-2026-26949

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Device Management Agent (DDMA) versions prior to 26.02

Description Dell Device Management Agent (DDMA) contains an Incorrect Authorization issue. A local attacker with low privileges could potentially exploit this, leading to Elevation of Privileges.

Recommendations Update Dell Device Management Agent (DDMA) to version 26.02 or later.

Fix

LPE

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-26949

Affected Products

Device Management Agent

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-26949 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26949 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000429177/dsa-2026-105 · Vendor Advisory
• https://twitter.com/cyberbivash/status/2029292439161176463 · Twitter Post
• https://twitter.com/CVEnew/status/2029272827321290795 · Twitter Post