CVE-2026-41122

HighCVSS 7.1

Published: 08/07/2026(UTC)Updated: 08/07/2026(UTC)Translated: 09/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

Dell PowerProtect Data Domain in multiple versions contains a stored cross-site scripting vulnerability. An unauthenticated attacker with remote access could exploit this flaw.

Risk Assessment

The risk includes information disclosure, session theft, or client-side request forgery, potentially compromising data confidentiality and integrity.

Recommendation

It is recommended to immediately update Dell PowerProtect Data Domain to the latest available version that addresses this vulnerability.

Original NVD description (English source)

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain a stored cross-site scripting vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability. Exploitation may lead to information disclosure, session theft, or client-side request forgery.