CVE-2026-53480
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A path traversal vulnerability in Dell PowerProtect Data Domain allows a highly privileged remote attacker to modify files outside the restricted directory. The issue affects multiple versions including LTS2024, LTS2025, and LTS2026 releases.
Risk Assessment
An attacker with high privileges can alter critical configuration or system files, potentially leading to data integrity compromise, service disruption, or further network compromise.
Recommendation
Immediately update Dell PowerProtect Data Domain to the latest patched version as recommended by the vendor. Restrict remote access to trusted IP addresses and monitor logs for suspicious file operations.
Original NVD description (English source)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted directory ('path traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized file modification.