High severity8.1NVD Advisory· Published Apr 22, 2026· Updated Jun 17, 2026

CVE-2026-26354

Description

Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain a stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Powerprotect Dp Series Appliance
cpe:2.3:a:dell:powerprotect_dp_series_appliance:*:*:*:*:*:*:*:*
Range: <2.7.9
Dell/Data Domain Operating System
cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
Range: >=7.7.1.0,<7.13.1.60
Dell/Powerprotect Data Domainllm-fuzzy
Range: 7.7.1.0 - 8.6, 8.3.1.0 - 8.3.1.10, 7.13.1.0 - 7.13.1.60

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilitiesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000