CVE-2026-24504 — Vulnetix

CVE-2026-24504 PUBLISHED CVSS 7.199999809265137 HIGH

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Risk Scores

CVSS v3.1

7.199999809265137

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Dell	PowerProtect Data Domain	0, 0, 0

Timeline

Apr 20, 2026 CVE Published
Apr 21, 2026 Security Advisory
Apr 22, 2026 CVE Updated

References

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-24504 advisory

Open in Interactive Console →