EUVD-2026-23906Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
6DescriptionCVE.org
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
AnalysisAI
Dell PowerProtect Data Domain versions 8.5 through 8.6 contain a local command injection vulnerability (CWE-78) allowing high-privileged remote attackers to execute arbitrary commands with root privileges. The attack requires local access and elevated privileges (CVSS PR:H) but results in complete system compromise through unauthenticated code execution. No public exploit code has been identified, and CVSS 6.7 reflects the significant privilege barrier despite high impact.
Technical ContextAI
This vulnerability is rooted in CWE-78 (Improper Neutralization of Special Elements used in an OS Command), a classic command injection flaw where user-controlled input is passed unsanitized to shell commands or system calls. Dell PowerProtect Data Domain is a deduplication and backup appliance that typically runs on hardened Linux-based systems. The affected versions (8.5-8.6) likely fail to properly sanitize command-line parameters, environment variables, or API input before passing them to the underlying operating system. The vulnerability is classified as local (AV:L) despite the mention of 'remote access,' meaning the attacker must already have a local session on the system-likely through prior authentication or compromise of a high-privilege account (such as a system administrator or API service account with PR:H privileges). CPE cpe:2.3:a:dell:powerprotect_data_domain indicates the data deduplication storage product family across all affected versions.
RemediationAI
Vendors should apply the security update released in Dell security advisory DSA-2026-060; the exact patched version number is not provided in the source data and must be obtained directly from https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities. Immediate workarounds include: (1) restricting administrative access to PowerProtect Data Domain to trusted personnel and enforcing multi-factor authentication on administrative accounts-this limits the pool of high-privilege accounts that could be compromised; (2) disabling remote administrative interfaces (SSH, web API) if not in active use, relying instead on local console or jump-host access with network segmentation; (3) implementing input validation and command execution logging at the OS level via SELinux or AppArmor profiles to monitor and block unexpected system calls from PowerProtect processes. Note that workarounds do not eliminate the vulnerability and are temporary measures pending patch deployment. Prioritize patching over compensating controls in production environments.
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute
Dell RecoverPoint for Virtual Machines prior to 6.0.3.1 HF1 contains hardcoded credentials (CVE-2026-22769, CVSS 10.0) t
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance vers
cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requir
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote at
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today