GHSA-p8f5-hqp5-3gq7

GHSA-p8f5-hqp5-3gq7 PUBLISHED CVSS 7.199999809265137 HIGH

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Risk Scores

CVSS 3.1

7.199999809265137

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Timeline

Apr 20, 2026 CVE Published
Apr 21, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2026-26943 advisory
https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities url

Open in Interactive Console →