CVE-2026-26942

MEDIUM · 6.7 CVSS Gepubliceerd: 20-04-2026 CWE-78

Beschrijving

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Vendors

Dell

Affected products

Powerprotect Dp Series Appliance Data Domain Operating System

References

www.dell.com