by Kastro CVE-2026-26354
Dell PowerProtect Data Domain — Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release versi…
Description · from the CVE record
Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain a stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.
Affected
ProductAffectedFixed inSource
PowerProtect Data Domain< 8.6.1.10, 8.7.0.0 or later8.6.1.10, 8.7.0.0 or laterCNA
PowerProtect Data Domain< 8.3.1.20 or later8.3.1.20 or laterCNA
PowerProtect Data Domain< 7.13.1.60 or later7.13.1.60 or laterCNA
PowerProtect Data Domain< 2.7.9 with DD OS 8.3.1.302.7.9 with DD OS 8.3.1.30CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
dell (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total