CVE-2026-53479
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk64th percentile - higher than 64% of all known CVEs
Summary
Dell PowerProtect Data Domain products in multiple versions contain an OS command injection vulnerability. This flaw allows a remote high-privileged attacker to bypass protection mechanisms.
Risk Assessment
Critical risk for the organization: an attacker can execute arbitrary commands with root privileges, leading to full system compromise and potential data loss.
Recommendation
It is recommended to upgrade to the latest available version of Dell PowerProtect Data Domain immediately. Prioritize this update due to the critical nature of the vulnerability.
Original NVD description (English source)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to protection mechanism bypass. This is a Critical vulnerability as it allows an attacker to invoke arbitrary command execution with root privileges; so Dell recommends customers to upgrade at the earliest opportunity.