VDB
GCVE-110-NCSC-2026-460
GCVE-110-NCSC-2026-460
Advisory PublishedCVSS 7.1/10
PowerProtect Data Domain versions 7.7.1.0 through 8.7 and LTS2024-2026 releases have a Relative Path Traversal vulnerability in the certificate that can enable a high privileged remote attacker to cause a Denial of Service.
Weaknesses (CWE)
CWE-23Relative Path TraversalCWE-787Out-of-bounds WriteCWE-121Stack-based Buffer OverflowCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-190Integer Overflow or WraparoundCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-321Use of Hard-coded Cryptographic KeyCWE-273Improper Check for Dropped PrivilegesCWE-862Missing AuthorizationCWE-290Authentication Bypass by SpoofingCWE-354Improper Validation of Integrity Check ValueCWE-28Path Traversal: '..\filedir'CWE-31Path Traversal: 'dir\..\..\filename'CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Risk Scores
CVSS 3.1
7.1/10
High · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Dell | vers:unknown/* | — | — |
Aliases
CVE-2026-103779CVE-2026-103780CVE-2026-103792CVE-2026-103799CVE-2026-110540CVE-2026-110541CVE-2026-68866CVE-2026-86377CVE-2026-86378CVE-2026-86379CVE-2026-86380CVE-2026-86383CVE-2026-86384CVE-2026-86385CVE-2026-86389CVE-2026-86390CVE-2026-86391CVE-2026-86393CVE-2026-86394CVE-2026-86395CVE-2026-86396CVE-2026-86397CVE-2026-86398CVE-2026-86399CVE-2026-86400CVE-2026-90717CVE-2026-90718CVE-2026-90720CVE-2026-90726CVE-2026-90728CVE-2026-90729CVE-2026-90730CVE-2026-94346CVE-2026-94347
References
Browse GCVE Records
937 records in the GCVE database · Updated November 5, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.