CVE-2026-26944 — Vulnetix

CVE-2026-26944 PUBLISHED CVSS 8.800000190734863 HIGH

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for critical function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. Exploitation requires an authenticated user to perform a specific action.

Risk Scores

CVSS v3.1

8.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Dell	PowerProtect Data Domain	0, 0, 0

Timeline

Apr 20, 2026 CVE Published
Apr 20, 2026 PoC Published
Apr 20, 2026 PoC Published
Apr 21, 2026 Security Advisory
Apr 22, 2026 CVE Updated

References

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-26944 advisory

Open in Interactive Console →