What is the CVSS score of CVE-2026-53479?

CVE-2026-53479 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 1.3%.

Which versions of PowerProtect Data Domain are affected by CVE-2026-53479?

Dell PowerProtect Data Domain backup appliances (versions 7.7.1.0-8.7 and LTS variants) are vulnerable to unauthenticated root command execution when high-privileged users access the management…. A patch is available.

How to fix or mitigate CVE-2026-53479?

Within 24 hours: Inventory all PowerProtect Data Domain deployments and confirm affected versions; restrict management interface access to designated administrative networks and implement IP allowlisting. Within 7 days: Subscribe to Dell's security advisory channel for patch availability; enable enhanced audit logging on all affected appliances; review administrative access lists and remove unnecessary high-privileged accounts. Within 30 days: Apply vendor patch immediately upon release (monitor Dell's official security bulletins); conduct forensic review of audit logs for unauthorized access; validate backup integrity and recovery procedures.

PowerProtect Data Domain CVE-2026-53479

EUVD-2026-42040 HIGH

OS Command Injection (CWE-78)

2026-07-07 dell

GHSA-f6jg-8mpc-4w2q

Command Injection Dell Powerprotect Data Domain

7.2

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.2 HIGH

Network-reachable management interface (AV:N) but exploitable only by an authenticated high-privilege admin (PR:H); low complexity, and root command execution gives full C/I/A impact.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorVendor: dell

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 07, 2026 - 15:01 EUVD

Analysis Generated

Jul 07, 2026 - 14:22 vuln.today

DescriptionCVE.org

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to protection mechanism bypass. This is a Critical vulnerability as it allows an attacker to invoke arbitrary command execution with root privileges; so Dell recommends customers to upgrade at the earliest opportunity.

AnalysisAI

OS command injection in Dell PowerProtect Data Domain (versions 7.7.1.0 through 8.7, plus the LTS2026, LTS2025, and LTS2024 branches) lets an already-authenticated, high-privileged remote user break out of the appliance's restricted management context and run arbitrary commands as root. Dell rates it Critical because the flaw defeats the platform's protection mechanism and yields full root-level code execution on the backup appliance. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but Dell explicitly urges customers to upgrade at the earliest opportunity.

Technical ContextAI

Dell PowerProtect Data Domain is a purpose-built backup and deduplication storage appliance that exposes a locked-down administrative interface (DD OS) rather than a general shell, so privileged operators are normally constrained to sanctioned commands. The vulnerability is a CWE-78 improper neutralization of special elements used in an OS command: user-supplied input reaching an administrative command handler is passed to an underlying operating-system shell without adequate sanitization, allowing shell metacharacters to inject additional commands. Because the appliance's management daemons run as root, successful injection escapes the intended command sandbox and executes with root privileges. The single affected CPE is cpe:2.3:a:dell:powerprotect_data_domain:*:*:*:*:*:*:*:*.

RemediationAI

Patch available per vendor advisory: upgrade DD OS to the fixed build for your release line as documented in Dell DSA-2026-278 (https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities); the provided input does not include the exact remediated version numbers per branch, so confirm the target build from that advisory before upgrading. Because exploitation requires an authenticated high-privilege account, the most effective compensating controls until patching are to restrict and segment the management network so the DD System Manager and CLI are reachable only from a dedicated admin VLAN or jump host (trade-off: tighter access may disrupt existing automation or monitoring integrations), enforce multi-factor authentication and minimize the number of admin-role accounts to shrink the pool of users who could abuse the flaw, and audit administrative command and session logs for anomalous shell metacharacters or unexpected command invocations. These do not substitute for the vendor patch, since a legitimate-but-malicious or compromised admin account can still trigger the injection.