PowerProtect Data Domain vulnerabilities

44 known vulnerabilities in PowerProtect Data Domain from Dell. 44 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  PowerProtect Data Domain: Stack-based Buffer Overflow

  CVE-2026-86378Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer

• 7.6 High severity

  PowerProtect Data Domain: Out-of-bounds Write

  CVE-2026-86377Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-of-bounds Wri

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-110541Oct 28, 2026DellEPSS 1.81%

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutrali

• 9.8 Critical severity

  PowerProtect Data Domain: Stack-based Buffer Overflow

  CVE-2026-103780Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer

• 8.3 High severity

  PowerProtect Data Domain: Improper Authentication

  CVE-2026-103779Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authenti

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-86394Oct 28, 2026DellEPSS 2.19%

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutrali

• 7.2 High severity

  PowerProtect Data Domain: Improper Privilege Management

  CVE-2026-86393Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privileg

• 7.2 High severity

  PowerProtect Data Domain: Integer Overflow or Wraparound

  CVE-2026-86389Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow

• 8.8 High severity

  PowerProtect Data Domain: Improper Check for Dropped Privileges

  CVE-2026-86385Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of priv

• 9.8 Critical severity

  PowerProtect Data Domain: Use of Hard-coded Cryptographic Key

  CVE-2026-86384Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded

• 7.2 High severity

  PowerProtect Data Domain: Integer Overflow or Wraparound

  CVE-2026-86380Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow

• 9.8 Critical severity

  PowerProtect Data Domain: Improper Authentication

  CVE-2026-86400Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authenti

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-86399Oct 28, 2026DellEPSS 2.19%

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutrali

• 8.8 High severity

  PowerProtect Data Domain: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-86398Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitati

• 9.8 Critical severity

  PowerProtect Data Domain: Missing Authorization

  CVE-2026-86397Oct 28, 2026Dell

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authenti

• 8.8 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-86396Oct 28, 2026DellEPSS 2.17%

  Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutrali

• 8.8 High severity

  PowerProtect Data Domain: Incorrect Authorization

  CVE-2026-56086Jul 8, 2026Dell

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Incorrect Authorization vulnerabilit

• 7.5 High severity

  PowerProtect Data Domain: Integer Overflow or Wraparound

  CVE-2026-53482Jul 8, 2026Dell

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Integer overflow or wraparound vulne

• 7.1 High severity

  PowerProtect Data Domain: Improper Neutralization of Input During Web Page Generation

  CVE-2026-41122Jul 8, 2026Dell

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain a stored cross-site scripting vulnerabi

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-53479Jul 7, 2026DellEPSS 1.97%

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special e

• 9.8 Critical severity

  PowerProtect Data Domain: Improper Authentication

  CVE-2026-53483Jul 7, 2026Dell

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 an improper authentication vulnerability. An un

• 9.8 Critical severity

  PowerProtect Data Domain: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-53481Jul 7, 2026Dell

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-53478Jul 3, 2026DellEPSS 2%

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special e

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-49815Jul 3, 2026DellEPSS 1.71%

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special E

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-49814Jul 3, 2026DellEPSS 2%

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper Neutralization of Special E

• 9.8 Critical severity

  PowerProtect Data Domain: Out-of-bounds Write

  CVE-2026-26354Apr 22, 2026Dell

  Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain a stack-based Buffer Overflow vul

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-26943Apr 20, 2026DellEPSS 1.19%

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access coul

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-26942Apr 20, 2026Dell

  Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerabi

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-24506Apr 20, 2026DellEPSS 1.19%

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access coul

• 7.2 High severity

  Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation…

  CVE-2026-24505Apr 20, 2026Dell

  Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

• 7.2 High severity

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0…

  CVE-2026-24504Apr 20, 2026Dell

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper input validation vulnerability. A high privileged attacker with remote access

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-22761Apr 20, 2026DellEPSS 1.16%

  Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

• 8.8 High severity

  PowerProtect Data Domain: Missing Authentication for Critical Functionality

  CVE-2026-26944Apr 20, 2026Dell

  Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for critical function vulnerability. An unauthenticated attacker

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-23774Apr 20, 2026DellEPSS 1.47%

  Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, contain an OS command injection vuln

• 7.2 High severity

  PowerProtect Data Domain: Improper Authentication

  CVE-2025-46607Apr 17, 2026Dell

  Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, le

• 7.2 High severity

  PowerProtect Data Domain: Improper Restriction of Excessive Authentication Attempts

  CVE-2025-46606Apr 17, 2026Dell

  Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication attempts vulnerability. A high privileged attacker with remote access could potentia

• 7.2 High severity

  PowerProtect Data Domain: Session Fixation

  CVE-2025-46605Apr 17, 2026Dell

  Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to

• 8.8 High severity

  PowerProtect Data Domain: Improper Certificate Validation

  CVE-2026-23776Apr 17, 2026Dell

  Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain(s) an Improper Certificate V

• 7.2 High severity

  PowerProtect Data Domain: Improper Neutralization of Special Elements used in a Command

  CVE-2026-23778Apr 17, 2026DellEPSS 1.16%

  Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerab

• 8.4 High severity

  PowerProtect Data Domain: Use of Weak Credentials

  CVE-2026-23853Apr 17, 2026Dell

  Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a use of weak credentials vu