Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

24 records

Advisory: Dell PowerProtect Data Domain — dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-securit… Clear all filters
TI-2026-21302 CVE-2026-26354 · GHSA-h5cf-xw55-j4wj

Stack-based buffer overflow in Dell PowerProtect Data Domain

Priority MEDIUM 43

Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.60, c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00504 Published 2026-04-22 Fixed in 8.6.1.10, 8.7.0.0 or later +3 CWE-121
TI-2026-21437 CVE-2026-26951 · GHSA-g6r9-7cf4-gwv6

Stack-based buffer overflow in Dell PowerProtect Data Domain

Priority LOW 31

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0013 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +3 CWE-121
TI-2026-18280 CVE-2026-22761 · GHSA-p8w2-3jvp-85x5

OS command injection in Dell PowerProtect Data Domain

Priority LOW 36

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01159 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +1 CWE-78
TI-2026-21428 CVE-2026-26942 · GHSA-f22f-m2ph-vfcc

OS command injection in Dell PowerProtect Data Domain

Priority LOW 35

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00882 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +1 CWE-78
TI-2026-21429 CVE-2026-26943 · GHSA-p8f5-hqp5-3gq7

OS command injection in Dell PowerProtect Data Domain

Priority LOW 36

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01191 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +3 CWE-78
TI-2026-19750 CVE-2026-24506 · GHSA-c3x5-j788-wjpm

OS command injection in Dell PowerProtect Data Domain

Priority LOW 36

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01191 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +3 CWE-78
TI-2026-19749 CVE-2026-24505 · GHSA-5f9j-32h2-hhg6

Improper input validation in Dell PowerProtect Data Domain

Priority LOW 34

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00417 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +1 CWE-20
TI-2026-19748 CVE-2026-24504 · GHSA-wr75-mj46-c335

Improper input validation in Dell PowerProtect Data Domain

Priority LOW 34

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper input validation vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00441 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +3 CWE-20
TI-2026-19143 CVE-2026-23774 · GHSA-gxrh-c9qf-pf88

OS command injection in Dell PowerProtect Data Domain

Priority LOW 37

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0147 Published 2026-04-20 Fixed in 8.6.0.0 or later, 8.3.1.20 or later +2 CWE-78
TI-2026-21430 CVE-2026-26944 · GHSA-hmwv-mfjf-w46v

Missing authentication in Dell PowerProtect Data Domain

Priority MEDIUM 41

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for critical function vu…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0054 Published 2026-04-20 Fixed in 8.6.1.10, 8.7.0.0 or later +3 CWE-306
TI-2026-19146 CVE-2026-23777 · GHSA-x63q-987j-jrv7

Information disclosure in Dell PowerProtect Data Domain

Priority LOW 29

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.003 Published 2026-04-17 Fixed in 8.6.0.0 or later, 8.3.1.20 or later +2 CWE-200
TI-2026-22575 CVE-2026-28263 · GHSA-6w3g-2v88-h993

Cross-site scripting in Dell PowerProtect Data Domain

Priority LOW 26

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00204 Published 2026-04-17 Fixed in 8.6.0.0 or later, 8.3.1.20 or later +2 CWE-79
TI-2025-29314 CVE-2025-46606 · GHSA-r9x4-2726-c64m

Missing brute-force protection in Dell PowerProtect Data Domain

Priority LOW 34

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication attempts vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00368 Published 2026-04-17 Fixed in 8.6.0.0 or later CWE-307
TI-2025-29313 CVE-2025-46605 · GHSA-wx63-92xj-ggq5

Session fixation in Dell PowerProtect Data Domain

Priority LOW 33

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00314 Published 2026-04-17 Fixed in 8.6.0.0 or later CWE-384
TI-2025-29340 CVE-2025-46641 · GHSA-536m-vwvg-ggr6

Improper authentication in Dell PowerProtect Data Domain

Priority LOW 31

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00354 Published 2026-04-17 Fixed in 8.6.0.0 or later CWE-287
TI-2025-29315 CVE-2025-46607 · GHSA-w6h6-qc6q-q65w

Improper authentication in Dell PowerProtect Data Domain

Priority LOW 34

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00368 Published 2026-04-17 Fixed in 8.6.0.0 or later CWE-287
TI-2026-27274 CVE-2026-35073 · GHSA-pc4q-wmj3-q7jg

OS command injection in Dell PowerProtect Data Domain

Priority LOW 32

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizati…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00571 Published 2026-04-17 Fixed in 8.7.0.1 or later, 8.3.1.30 or later +1 CWE-78
TI-2026-27275 CVE-2026-35074 · GHSA-xgpm-2v6j-vx8q

OS command injection in Dell PowerProtect Data Domain

Priority LOW 32

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizati…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00571 Published 2026-04-17 Fixed in 8.6.1.10, 8.7.0.1 or later +3 CWE-78
TI-2026-27273 CVE-2026-35072 · GHSA-53vq-962v-f9cq

OS command injection in Dell PowerProtect Data Domain

Priority LOW 32

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizati…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00571 Published 2026-04-17 Fixed in 8.6.1.10, 8.7.0.1 or later +3 CWE-78
TI-2026-27310 CVE-2026-35153 · GHSA-4229-xrvq-qm47

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0…

Priority LOW 31

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizati…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00215 Published 2026-04-17 Fixed in 8.6.1.10, 8.7.0.1 or later +3 CWE-88
TI-2026-19148 CVE-2026-23779 · GHSA-7g82-gmhh-22cx

Command injection in Dell PowerProtect Data Domain

Priority LOW 32

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00524 Published 2026-04-17 Fixed in 8.6.0.0 or later, 8.3.1.20 or later +2 CWE-77
TI-2026-19145 CVE-2026-23776 · GHSA-jh98-4jxg-c74j

Improper certificate validation in Dell PowerProtect Data Domain

Priority LOW 39

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00222 Published 2026-04-17 Fixed in 8.3.1.30 or later, 7.13.1.70 or later +2 CWE-295
TI-2026-19147 CVE-2026-23778 · GHSA-xpp5-4hhp-6qhr

Command injection in Dell PowerProtect Data Domain

Priority LOW 36

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0114 Published 2026-04-17 Fixed in 8.6.0.0 or later, 8.3.1.20 or later +2 CWE-77
TI-2026-19216 CVE-2026-23853 · GHSA-ch84-4cgh-f3fc

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature…

Priority LOW 38

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00158 Published 2026-04-17 Fixed in 8.6.0.0 or later, 8.3.1.20 or later +2 CWE-1391