Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Dell PowerProtect Data Domain allows remote code execution

CVE-2026-103780 · published 5 days ago
Summary

Certain versions of Dell PowerProtect Data Domain have a flaw that lets an unauthenticated attacker running on the network overflow a memory buffer and run commands on the appliance. This could let attackers take control of the system and access data. Apply the vendor's security updates or patches as soon as possible to close the gap.

What to do
  • Update dell powerprotect data domain to version 8.9.0.0 or later or later.
Affected software
VendorProductAffected versions
dell powerprotect data domain < 8.9.0.0 or later
Original advisory text
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release ...
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published28 Oct 2026
Updated31 Oct 2026
First seen28 Oct 2026
Sources
CVE-2026-103780 · NVD
CVE-2026-103780 · MITRE
Track software like this
Free during beta