High severity7.2NVD Advisory· Published Apr 20, 2026· Updated Apr 28, 2026
CVE-2026-24506
CVE-2026-24506
Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root.
Affected products
2- cpe:2.3:a:dell:powerprotect_dp_series_appliance:*:*:*:*:*:*:*:*Range: <2.7.9
- cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*Range: >=7.7.1.0,<7.13.1.70
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.