DSA-2026-416: Security Update for Dell PowerProtect Data Domain Multiple Vulnerabilities
Summary: Dell PowerProtect Data Domain remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Impact
Critical
Details
|
Third-Party Component |
CVEs |
More Information |
|
IDRAC9 |
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DSA-2026-312: Security Update for Dell iDRAC9 Vulnerabilities |
|
Apache HTTP Server |
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006 |
|
|
Lodash |
CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465 |
|
|
rsync |
CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2026-43619 |
|
|
Apache Tomcat |
CVE-2026-29145, CVE-2026-24734 |
|
|
libpq5 |
CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474 |
|
|
libtiff5 |
CVE-2025-61144, CVE-2026-4775 |
|
|
nginx |
CVE-2026-27784, CVE-2026-27654, CVE-2026-1642 |
|
|
libexpat |
CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375 |
|
|
pillow |
CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311 |
|
|
tar |
CVE-2025-45582 |
|
|
suseconnect |
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281 |
|
|
helm |
CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-33811, CVE-2026-39836, CVE-2026-39825, CVE-2026-25679, CVE-2026-32280, CVE-2026-32281, CVE-2026-32288, CVE-2026-32283, CVE-2026-46680, CVE-2026-35469, CVE-2026-35206, CVE-2025-55199, CVE-2026-33814, CVE-2026-41888 |
|
|
Bind9 |
CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519 |
|
|
curl |
CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805 |
|
|
python311 |
CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2026-32597 |
|
|
nghttp2 |
CVE-2026-27135 |
|
|
pyasn1 |
CVE-2026-30922 |
|
|
Python programming language |
CVE-2026-3087, CVE-2026-4519 |
|
|
urllib3 |
CVE-2026-44431, CVE-2026-44432 |
|
|
XZ Utils |
CVE-2026-34743 |
|
|
libssh2 |
CVE-2026-7598 |
|
|
libcap2 |
CVE-2026-4878 |
|
|
idna |
CVE-2026-45409 |
|
|
c-ares |
CVE-2025-62408 |
|
|
NFS |
CVE-2025-12801 |
|
|
pip |
CVE-2026-6357, CVE-2026-3219 |
|
|
PKIXSSH |
CVE-2026-45447, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45445, CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45446 |
|
|
libexpat |
CVE-2026-24515 |
|
|
OpenSSL
|
CVE-2025-69421, CVE-2026-22795, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-103780 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution. |
9.8 |
|
|
CVE-2026-86384 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user. |
9.8 |
|
|
CVE-2026-86397 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to privileged account creation. This is a critical severity vulnerability as it allows an attacker to take complete control of the system. Dell recommends customers to upgrade at the earliest opportunity. |
9.8 |
|
|
CVE-2026-86400 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. This is a critical severity vulnerability as it allows an attacker to take complete control of the system. Dell recommends customers to upgrade at the earliest opportunity. |
9.8 |
|
|
CVE-2026-103799 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems. |
9.6 |
|
|
CVE-2026-103792 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access to managed systems. |
9.6 |
|
|
CVE-2026-90717 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability could impact other managed Data Domain systems. |
9.1 |
|
|
CVE-2026-86378 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access. |
8.8 |
|
|
CVE-2026-86385 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges. |
8.8 |
|
|
CVE-2026-86396 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. |
8.8 |
|
|
CVE-2026-86398 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker. |
8.8 |
|
|
CVE-2026-103779 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
8.3 |
|
|
CVE-2026-86377 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
7.6 |
|
|
CVE-2026-110541 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. |
7.2 |
|
|
CVE-2026-94347
|
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
7.2 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
|
CVE-2026-94346
|
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86379 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86380 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
7.2 |
|
|
CVE-2026-86389 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. |
7.2 |
|
|
CVE-2026-86393 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.2 |
|
|
CVE-2026-86394 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86395 |
Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86399 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-90718 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-110540 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation. |
7.1 |
|
|
CVE-2026-86383 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
6.8 |
|
|
CVE-2026-90720 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
6.7 |
|
|
CVE-2026-90729 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
6.7 |
|
|
CVE-2026-68866 |
PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
6.5 |
|
|
CVE-2026-86390 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. |
6.5 |
|
|
CVE-2026-90730 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. |
6.5 |
|
|
CVE-2026-86391 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
6.4 |
|
|
CVE-2026-90728 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. |
6.3 |
|
|
CVE-2026-90726 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service. |
6.0 |
|
|
CVE-2026-56084 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery. |
5.8 |
|
|
CVE-2026-86388 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. |
5.3 |
|
|
CVE-2026-92665 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of Resources Without Limits or Throttling vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
5.3 |
|
|
CVE-2026-86392 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-90725 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-90731 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-90732 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-86386 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
4.3 |
|
|
CVE-2026-90727
|
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering. |
3.8 |
|
|
CVE-2026-90721 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service. |
3.4 |
|
|
CVE-2026-86401 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure. |
2.7 |
|
|
CVE-2026-90719 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
2.7 |
|
|
CVE-2026-90723 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
2.7 |
|
|
CVE-2026-90724 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
2.7 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-103780 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution. |
9.8 |
|
|
CVE-2026-86384 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to credential exposure. The credentials may be used to access the system with privileges of the compromised user. |
9.8 |
|
|
CVE-2026-86397 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to privileged account creation. This is a critical severity vulnerability as it allows an attacker to take complete control of the system. Dell recommends customers to upgrade at the earliest opportunity. |
9.8 |
|
|
CVE-2026-86400 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. This is a critical severity vulnerability as it allows an attacker to take complete control of the system. Dell recommends customers to upgrade at the earliest opportunity. |
9.8 |
|
|
CVE-2026-103799 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems. |
9.6 |
|
|
CVE-2026-103792 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access to managed systems. |
9.6 |
|
|
CVE-2026-90717 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability could impact other managed Data Domain systems. |
9.1 |
|
|
CVE-2026-86378 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access. |
8.8 |
|
|
CVE-2026-86385 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges. |
8.8 |
|
|
CVE-2026-86396 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. |
8.8 |
|
|
CVE-2026-86398 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker. |
8.8 |
|
|
CVE-2026-103779 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
8.3 |
|
|
CVE-2026-86377 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
7.6 |
|
|
CVE-2026-110541 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. |
7.2 |
|
|
CVE-2026-94347
|
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
7.2 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
|
CVE-2026-94346
|
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86379 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86380 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
7.2 |
|
|
CVE-2026-86389 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. |
7.2 |
|
|
CVE-2026-86393 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.2 |
|
|
CVE-2026-86394 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86395 |
Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-86399 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-90718 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. |
7.2 |
|
|
CVE-2026-110540 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation. |
7.1 |
|
|
CVE-2026-86383 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
6.8 |
|
|
CVE-2026-90720 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. |
6.7 |
|
|
CVE-2026-90729 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. |
6.7 |
|
|
CVE-2026-68866 |
PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
6.5 |
|
|
CVE-2026-86390 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. |
6.5 |
|
|
CVE-2026-90730 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. |
6.5 |
|
|
CVE-2026-86391 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
6.4 |
|
|
CVE-2026-90728 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. |
6.3 |
|
|
CVE-2026-90726 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service. |
6.0 |
|
|
CVE-2026-56084 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery. |
5.8 |
|
|
CVE-2026-86388 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. |
5.3 |
|
|
CVE-2026-92665 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Allocation of Resources Without Limits or Throttling vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
5.3 |
|
|
CVE-2026-86392 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-90725 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-90731 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-90732 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service. |
4.9 |
|
|
CVE-2026-86386 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
4.3 |
|
|
CVE-2026-90727
|
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering. |
3.8 |
|
|
CVE-2026-90721 |
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service. |
3.4 |
|
|
CVE-2026-86401 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure. |
2.7 |
|
|
CVE-2026-90719 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
2.7 |
|
|
CVE-2026-90723 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
2.7 |
|
|
CVE-2026-90724 |
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
2.7 |
Affected Products & Remediation
|
CVEs Addressed |
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-45447, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45445, CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45446, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86385, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-94346, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-86383, CVE-2026-90720, CVE-2026-90729, CVE-2026-68866, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 8.9 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8.0.0 |
Version 8.9.0.0 or later |
|
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-90720, CVE-2026-90729, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-86383, CVE-2026-90720, CVE-2026-90729, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-86383, CVE-2026-90720, CVE-2026-90729, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
|
|
CVE-2026-68866, CVE-2026-94346 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.70 |
Version 7.13.1.80 or later |
|
|
CVE-2026-68866, CVE-2026-94346 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.30 |
Version 8.3.1.40 or later |
|
|
CVE-2026-68866, CVE-2026-94346 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.10 |
Version 8.6.1.20 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 8.9 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8.0.0 |
Version 8.9.0.0 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
|
|
CVE-2026-86395, CVE-2026-94347 |
DD OS 8.9 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8 |
Version 8.9.0.0 or later |
|
|
CVE-2026-86395 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2026-86395 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2026-86395 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
|
|
CVE-2026-94347 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.70 |
Version 7.13.1.80 or later |
|
|
CVE-2026-94347 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.30 |
Version 8.3.1.40 or later |
|
|
CVE-2026-94347
|
DD OS 8.6.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.10 |
Version 8.6.1.20 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 8.9 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8 |
Version 8.9.0.0 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
|
CVEs Addressed |
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-45447, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-45445, CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45446, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86385, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-94346, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-86383, CVE-2026-90720, CVE-2026-90729, CVE-2026-68866, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 8.9 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8.0.0 |
Version 8.9.0.0 or later |
|
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-90720, CVE-2026-90729, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-86383, CVE-2026-90720, CVE-2026-90729, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2026-28780, CVE-2026-23918, CVE-2026-24072, CVE-2026-29169, CVE-2026-34059, CVE-2026-29168, CVE-2026-33523, CVE-2026-33857, CVE-2026-33007, CVE-2026-34032, CVE-2026-33006, CVE-2026-29145, CVE-2026-24734, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2025-62408, CVE-2026-7168, CVE-2026-6429, CVE-2026-6276, CVE-2026-6253, CVE-2026-5773, CVE-2026-5545, CVE-2026-4873, CVE-2026-3805, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-7598, CVE-2026-4800, CVE-2021-23337, CVE-2026-2950, CVE-2025-13465, CVE-2025-12801, CVE-2026-27135, CVE-2026-6357, CVE-2026-3219, CVE-2026-30922, CVE-2026-3087, CVE-2026-4519, CVE-2026-43618, CVE-2026-41035, CVE-2026-29518, CVE-2026-43619, CVE-2026-43620, CVE-2026-43617, CVE-2026-45232, CVE-2025-69421, CVE-2026-22795, CVE-2026-86384, CVE-2026-86397, CVE-2026-86400, CVE-2026-86378, CVE-2026-86396, CVE-2026-86398, CVE-2026-86377, CVE-2026-86380, CVE-2026-86389, CVE-2026-86393, CVE-2026-86394, CVE-2026-86399, CVE-2026-90718, CVE-2026-86383, CVE-2026-90720, CVE-2026-90729, CVE-2026-86390, CVE-2026-90730, CVE-2026-90728, CVE-2026-90726, CVE-2026-56084, CVE-2026-86388, CVE-2026-92665, CVE-2026-86392, CVE-2026-90725, CVE-2026-90731, CVE-2026-90732, CVE-2026-90727, CVE-2026-90721, CVE-2026-103780, CVE-2026-103779, CVE-2026-110541 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
|
|
CVE-2026-68866, CVE-2026-94346 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.70 |
Version 7.13.1.80 or later |
|
|
CVE-2026-68866, CVE-2026-94346 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.30 |
Version 8.3.1.40 or later |
|
|
CVE-2026-68866, CVE-2026-94346 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain series appliances, Data Domain Virtual Edition, Dell APEX Protection Storage, and Data Domain Management Center with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.10 |
Version 8.6.1.20 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 8.9 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8.0.0 |
Version 8.9.0.0 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2026-32283, CVE-2026-33811, CVE-2026-39836, CVE-2026-33814, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-27142, CVE-2026-39826, CVE-2026-39823, CVE-2026-39825, CVE-2026-25679, CVE-2026-32288, CVE-2026-46680, CVE-2026-35469, CVE-2026-5946, CVE-2026-3592, CVE-2026-3039, CVE-2026-1519, CVE-2026-35206, CVE-2025-55199, CVE-2026-41888, CVE-2026-45409, CVE-2026-4878, CVE-2026-6253, CVE-2026-6429, CVE-2026-5545, CVE-2026-25210, CVE-2026-45186, CVE-2026-41080, CVE-2026-24515, CVE-2026-32778, CVE-2026-32776, CVE-2026-32777, CVE-2025-66382, CVE-2025-59375, CVE-2026-34743, CVE-2026-31790, CVE-2026-28389, CVE-2026-28387, CVE-2026-28388, CVE-2026-31789, CVE-2026-28390, CVE-2026-6638, CVE-2026-6575, CVE-2026-6637, CVE-2026-6475, CVE-2026-6476, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6472, CVE-2026-6473, CVE-2026-6474, CVE-2026-4224, CVE-2026-4519, CVE-2026-3644, CVE-2026-0672, CVE-2025-61144, CVE-2026-4775, CVE-2026-27784, CVE-2026-27654, CVE-2026-1642, CVE-2026-40192, CVE-2026-42310, CVE-2026-42308, CVE-2026-42311, CVE-2026-32597, CVE-2026-45232, CVE-2026-43617, CVE-2026-43618, CVE-2026-43620, CVE-2026-41035, CVE-2026-29518, CVE-2024-12084, CVE-2025-45582, CVE-2026-44431, CVE-2026-44432, CVE-2026-90717, CVE-2026-86379, CVE-2026-86391, CVE-2026-86386, CVE-2026-86401, CVE-2026-90719, CVE-2026-90723, CVE-2026-90724, CVE-2026-103799, CVE-2026-103792, CVE-2026-110540 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain Management Center with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
|
|
CVE-2026-86395, CVE-2026-94347 |
DD OS 8.9 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8 |
Version 8.9.0.0 or later |
|
|
CVE-2026-86395 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2026-86395 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2026-86395 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
|
|
CVE-2026-94347 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.70 |
Version 7.13.1.80 or later |
|
|
CVE-2026-94347 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.30 |
Version 8.3.1.40 or later |
|
|
CVE-2026-94347
|
DD OS 8.6.1 |
Dell PowerProtect Data Domain Virtual Edition with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.10 |
Version 8.6.1.20 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 8.9 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) Feature Release |
Versions 7.7.1.0 through 8.8 |
Version 8.9.0.0 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 7.13.1 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) LTS2024 7.13.1 |
Versions 7.13.1.0 through 7.13.1.80 |
Version 7.13.1.90 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 8.3.1 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) LTS2025 8.3.1 |
Versions 8.3.1.0 through 8.3.1.40 |
Version 8.3.1.50 or later |
|
|
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778, CVE-2025-60876 |
DD OS 8.6.1 |
Dell PowerProtect Data Domain series appliances with Data Domain Operating System (DD OS) LTS2026 8.6.1 |
Versions 8.6.1.0 through 8.6.1.20 |
Version 8.6.1.30 or later |
- PowerProtect Data Domain: Software Versions : This KB article provides the status of the current active PowerProtect Data Domain Operating System (DD OS) releases, along with links to the release notes. (Requires support.dell.com login to view article).
- For instructions on how to upgrade Data Domain Operating System (DD OS), see Data Domain and DDVE: How to Upgrade the Data Domain Operating System
- Some security scanners may still report False Positive findings after upgrading to remediated DDOS versions. For more details, please refer to the respective False Positive KB articles:
- Dell PowerProtect Data Domain False Positive Security Vulnerabilities for DD OS 8.9
- Dell PowerProtect Data Domain False Positive Security Vulnerabilities for DDOS 8.6
- Dell PowerProtect Data Domain False Positive Security Vulnerabilities for DDOS 8.3
- Dell Data Domain False Positive Security Vulnerabilities for DDOS 7.13
Revision History
|
Revision |
Date |
Description |
|
1.0 |
2026-10-01 |
Initial Release |
|
2.0 |
2026-10-07 |
Minor updates |
|
3.0 |
2026-10-19 |
Added details for CVE-2026-103780, CVE-2026-103799, CVE-2026-103779, CVE-2026-103792, CVE-2026-110540, CVE-2026-110541 in "Proprietary Code" and "Affected Products and Remediation" tables |
Acknowledgements
- Dell would like to thank Ahmed Y. Elmogy for reporting this issue: CVE-2026-56084
- Dell would like to thank songxiaoyue for reporting the following issues: CVE-2026-90732, CVE-2026-90725, CVE-2026-90731