PT-2026-56189 · Dell · Dell Powerprotect Data Domain

CVE-2026-53479

·

Published

2026-07-07

·

Updated

2026-07-08

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 Dell PowerProtect Data Domain versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.70
Description An improper neutralization of special elements used in an OS command allows a remote high-privileged attacker to perform OS command injection. This issue enables the attacker to bypass protection mechanisms and execute arbitrary commands with root privileges.
Recommendations Upgrade versions 7.7.1.0 through 8.7 to a newer version. Upgrade versions 8.6.1.0 through 8.6.1.10 to a newer version. Upgrade versions 8.3.1.0 through 8.3.1.30 to a newer version. Upgrade versions 7.13.1.0 through 7.13.1.70 to a newer version.

Fix

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-53479

Affected Products

Dell Powerprotect Data Domain