CVE-2026-23779 — Vulnetix

CVE-2026-23779 PUBLISHED CVSS 6.699999809265137 MEDIUM

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain root-level access.

Risk Scores

CVSS v3.1

6.699999809265137

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Dell	PowerProtect Data Domain	0, 0, 0

Timeline

Apr 17, 2026 CVE Published
Apr 17, 2026 PoC Published
Apr 18, 2026 Security Advisory
Apr 18, 2026 CVE Updated

References

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-23779 advisory

Open in Interactive Console →