CVE-2026-46466
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
The vulnerability in Dell PowerProtect Data Domain involves the use of a less trusted source. It allows a high-privileged attacker with remote access to tamper with information.
Risk Assessment
The risk for the organization includes potential data integrity breaches, which could lead to unauthorized modifications of critical information stored in the system.
Recommendation
It is recommended to immediately update Dell PowerProtect Data Domain to the latest available version that includes a security fix. Also, restrict remote access to trusted administrators only.
Original NVD description (English source)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of less trusted source vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information tampering.