EUVD-2026-23396
GHSA-xpp5-4hhp-6qhr
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to gain root-level access.
AnalysisAI
Command injection in Dell PowerProtect Data Domain allows high-privileged remote attackers to escalate to root-level access across multiple DD OS versions (7.7.1.0-8.5, LTS releases 7.13.1.0-7.13.1.50, 8.3.1.0-8.3.1.20). Exploitation requires existing high-privilege administrator credentials but is otherwise straightforward (AC:L). …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
24 hours: Inventory all Dell PowerProtect Data Domain deployments and identify instances running affected versions (7.7.1.0-8.5, 7.13.1.0-7.13.1.50, 8.3.1.0-8.3.1.20); document each instance location and current admin access controls. 7 days: Implement administrative access restrictions-limit active administrator accounts to essential personnel only, enforce multi-factor authentication where supported, and enable detailed audit logging of all administrative actions per Dell advisory DSA-2026-060 baseline requirements. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today