Medium severity6.7NVD Advisory· Published Apr 20, 2026· Updated Apr 28, 2026
CVE-2026-26942
CVE-2026-26942
Description
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Affected products
2- cpe:2.3:a:dell:powerprotect_dp_series_appliance:*:*:*:*:*:*:*:*Range: <2.7.9
- cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*Range: >=7.7.1.0,<8.6.1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.