CVE Catalog

CVE-2026-103780

CriticalCVSS 9.8
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain contains a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could exploit it to achieve command execution.

Risk Assessment

This enables remote code execution and full compromise of the backup system, posing a critical threat to confidentiality, integrity, and availability.

Recommendation

Immediately install the patch and restrict network access to the appliance to trusted networks.

Other vulnerabilities in Dell PowerProtect Data Domain

See all
Original NVD description (English source)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS