Is Dell affected by EUVD-2026-23884?

Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6 contain a root-level command injection vulnerability that allows high-privileged administrators to execute arbitrary commands, potentially compromising backup infrastructure that protects critical organizational data.

Dell EUVD-2026-23884

| CVE-2026-24504 HIGH

Improper Input Validation (CWE-20)

2026-04-20 dell

GHSA-wr75-mj46-c335

Information Disclosure Dell

7.2

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 20, 2026 - 17:52 vuln.today

cvss_changed

Analysis Generated

Apr 20, 2026 - 17:52 vuln.today

Patch available

Apr 20, 2026 - 17:16 EUVD

DescriptionNVD

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

AnalysisAI

Root-level command injection in Dell PowerProtect Data Domain versions 7.7.1.0-8.6, 8.3.1.0-8.3.1.20 (LTS2025), and 7.13.1.0-7.13.1.60 (LTS2024) allows high-privileged remote attackers to execute arbitrary commands as root through improper input validation. Vendor patch available via DSA-2026-060. …

RemediationAI

Within 24 hours: Inventory all Dell PowerProtect Data Domain instances and identify those running versions 7.7.1.0-8.6, 8.3.1.0-8.3.1.20 (LTS2025), or 7.13.1.0-7.13.1.60 (LTS2024). Within 7 days: Apply vendor patch DSA-2026-060 to all affected systems in a staged approach, beginning with non-production environments. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

EUVD-2026-23884 vulnerability details – vuln.today

Back

Dell EUVD-2026-23884

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code