What is the CVSS score of CVE-2026-41124?

CVE-2026-41124 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Is there a patch available for CVE-2026-41124?

Yes, a patch is available for CVE-2026-41124. Update the affected software to the latest version immediately.

PowerProtect Data Domain CVE-2026-41124

EUVD-2026-41534 MEDIUM

Path Traversal (CWE-22)

2026-07-03 dell

GHSA-pq7x-9m82-559w

Information Disclosure Path Traversal Dell Powerprotect Data Domain

4.4

CVSS 3.1 · NVD

Severity by source

Vendor (dell) PRIMARY

LOW

qualitative

NVD

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

2.3 LOW

Local-only access vector and high-privilege prerequisite are confirmed by description; confidentiality-only low impact reflects read-only path traversal with no write or availability effect.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Severity Changed

Jul 08, 2026 - 19:37 NVD

LOW MEDIUM

CVSS changed

Jul 08, 2026 - 19:37 NVD

2.3 (LOW) 4.4 (MEDIUM)

Patch available

Jul 03, 2026 - 14:01 EUVD

Analysis Generated

Jul 03, 2026 - 12:51 vuln.today

DescriptionNVD

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

AnalysisAI

Path traversal in Dell PowerProtect Data Domain allows a locally authenticated high-privileged attacker to read files outside restricted directories, resulting in information disclosure. Affected deployments span multiple release trains - standard releases 7.7.1.0 through 8.6, LTS2026 8.6.1.0-8.6.1.10, LTS2025 8.3.1.0-8.3.1.30, and LTS2024 7.13.1.0-7.13.1.70. No public exploit identified at time of analysis; the low CVSS score of 2.3 correctly reflects the high privilege and local access prerequisites that substantially constrain real-world exploitation scope.

Technical ContextAI

CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) describes a failure to sanitize path inputs, allowing traversal sequences such as '../' to escape an intended root directory and reach otherwise restricted files on the filesystem. Dell PowerProtect Data Domain (CPE: cpe:2.3:a:dell:powerprotect_data_domain) is a purpose-built backup and data protection appliance running Dell's DD OS. The flaw resides within a software component of the appliance that performs file path resolution without enforcing strict boundary checks, enabling a high-privileged local operator to read files the application logic intends to be inaccessible. The scope is unchanged (S:U), indicating the vulnerable component and impacted component are the same - no lateral privilege escalation to other system components is implied.

RemediationAI

Apply the vendor-released updates documented in Dell Security Advisory DSA-2026-278 at https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities. Exact patched version numbers are referenced in the advisory but are not independently confirmed from the data provided here - consult the advisory directly to identify the correct target version for each release train. As interim compensating controls, enforce the principle of least privilege by auditing and reducing the number of accounts holding high-privileged roles on Data Domain systems, since PR:H is the primary exploitation prerequisite; removing unnecessary admin accounts eliminates the attack surface without service disruption. Additionally, restrict local console and SSH access to the appliance to only authorized personnel via network ACLs and jump-host controls, and enable audit logging of file access operations to detect anomalous traversal attempts. These controls have no functional side effects on normal backup operations.