CVE-2026-53481
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A path traversal vulnerability has been discovered in Dell PowerProtect Data Domain. An unauthenticated attacker with remote access could exploit this flaw to gain unauthorized access to the system. This is a critical severity vulnerability as it allows complete system compromise.
Risk Assessment
The risk to the organization is critical – an attacker can remotely, without authentication, gain full control of the PowerProtect Data Domain system, potentially compromising data confidentiality, integrity, and availability.
Recommendation
Immediately upgrade the Dell PowerProtect Data Domain system to the latest available version as recommended by the vendor. Additionally, restrict remote access to the system to trusted networks only.
Original NVD description (English source)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to the system. This is a critical severity vulnerability as it allows an attacker to take complete control of system; so Dell recommends customers to upgrade at the earliest opportunity.