Medium severity6.7NVD Advisory· Published Apr 20, 2026· Updated Apr 28, 2026
CVE-2026-26942
CVE-2026-26942
Description
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:dell:powerprotect_dp_series_appliance:*:*:*:*:*:*:*:*Range: <2.7.9
- cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*Range: >=7.7.1.0,<8.6.1.0
- Range: >=8.5 <=8.6
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.