Medium severity6.7NVD Advisory· Published Apr 17, 2026· Updated Apr 20, 2026
CVE-2026-23779
CVE-2026-23779
Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain root-level access.
Affected products
2- cpe:2.3:a:dell:powerprotect_dp_series_appliance:*:*:*:*:*:*:*:*Range: <2.7.9
- cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*Range: >=7.7.1.0,<7.13.1.50
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.