← Database

CVE-2026-26942

MEDIUM CVSS: 6.7 Published: 2026-04-20 Modified: 2026-06-17

Description

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Affected Platforms

Dell Data Domain Operating SystemDell Powerprotect Dp Series Appliance

Weakness Type

CWE-78

References