CVE-2026-24505

Summary

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Affected Software

VendorProductVersion RangeStatus
DellPowerProtect Data Domain0 < 8.6.1.10, 8.7.0.0 or lateraffected
DellPowerProtect Data Domain0 < 2.7.9 with DD OS 8.3.1.30affected

Weaknesses

  • CWE-20: CWE-20: Improper Input Validation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References