CVE-2026-26354 - Vulnerability Analysis

Overview

Dell PowerProtect Data Domain with DD OS 7.7.1.0 through 8.6, LTS2025 8.3.1.0 through 8.3.1.10, and LTS2024 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow in the operating system, letting unauthenticated remote attackers execute arbitrary commands.

Severity & Score

Impact

Unauthenticated remote attackers can execute arbitrary commands, potentially leading to full system compromise.

Mitigation

Update to the latest available version of Dell PowerProtect Data Domain DD OS.

References

• https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner