CVE-2026-26951

Published: Apr 20, 2026Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: security_alert@emc.com (Secondary)

Description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Affected (4)

Products: Dell: Data Domain Operating System, Powerprotect Dp Series Appliance

Dell

2 products

Data Domain Operating System

Powerprotect Dp Series Appliance

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Data Domain Operating System	From 7.7.1.0 to 7.13.1.70
Dell Data Domain Operating System	From 8.3.1.0 to 8.3.1.30
Dell Data Domain Operating System	From 8.4.0.0 to 8.6.1.0
Dell Powerprotect Dp Series Appliance	Before 2.7.9

Related CWEs

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (1)

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.