Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain contains a stack-based buffer overflow vulnerability in specific versions. A high privileged attacker with local access could exploit this vulnerability, potentially leading to arbitrary command execution with root privileges. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-26951 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system and possess high privileges. By leveraging the stack-based buffer overflow, the attacker can execute arbitrary commands with root privileges, compromising the system’s security and potentially leading to unauthorized access to sensitive data.
Affected Products
- PowerProtect Data Domain versions 7.7.1.0 through 8.6
- LTS2025 release version 8.3.1.0 through 8.3.1.20
- LTS2024 release versions 7.13.1.0 through 7.13.1.60
Mitigation
To mitigate this vulnerability, users should update their PowerProtect Data Domain systems to the latest versions provided by Dell. Regularly applying security updates and patches can help protect against potential exploits and ensure the integrity of the system.