Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.7

Dell PowerProtect Data Domain: Unprivileged Access Can Lead to Root Control

CVE-2026-26951 · published 6 months ago
Summary

A bug in Dell PowerProtect Data Domain software allows an attacker with high privileges to execute any command on the system with the highest level of access. This means an attacker could take control of the system. Dell recommends updating to the latest version to fix this issue.

Original advisory text
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overf...
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
6.7 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published20 Apr 2026
Updated26 Oct 2026
First seen20 Apr 2026
Sources
CVE-2026-26951 · NVD
Track software like this
Free during beta