VDB
CVE-2026-35153
CVE-2026-35153
PUBLISHED
CVSS 6.699999809265137 MEDIUM
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of argument delimiters in a command ('argument injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
EPSS 0.01% · 1.9th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.01%
1.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | PowerProtect Data Domain | 0, 0, 0 |
Exploit Intelligence
Timeline
- Apr 17, 2026 CVE Published
- Apr 17, 2026 PoC Published
- Apr 18, 2026 Security Advisory
- Apr 18, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score