Skip to content
OpenAdvisories
Medium · 6.7 CVE-2026-22761 EUVD-2026-23906

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote a…

Published Apr 20, 2026 · Updated Apr 22, 2026 · Assigned by dell

Vendor: Dell Product: PowerProtect Data Domain

Description

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Affected products

VendorProductAffectedFixed
Dell PowerProtect Data Domain < 8.6.1.10, 8.7.0.0 or later, < 2.7.9 with DD OS 8.3.1.30 8.6.1.10, 8.7.0.0 or later

Advisories 1

References