CVE-2026-35072

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7.0.0 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.20 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.60

Description Improper neutralization of special elements used in an OS command allows a high privileged attacker with local access to execute arbitrary commands with root privileges. OS command injection is a flaw where an application sends untrusted data to a system shell, allowing the execution of unauthorized operating system commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.