Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Domain Operating System contains a stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution. This issue affects multiple feature release versions and LTS releases.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2026-26354 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected system. By sending specially crafted requests, the attacker can trigger the buffer overflow, which may allow them to execute arbitrary commands on the system without authentication.
Affected Products
- Feature Release versions 7.7.1.0 through 8.6
- LTS2025 release version 8.3.1.0 through 8.3.1.10
- LTS2024 release versions 7.13.1.0 through 7.13.1.60
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by Dell for the affected versions of PowerProtect Data Domain. Regularly updating systems and monitoring for unusual activity can also help reduce the risk of exploitation.