CVE-2026-53482
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Dell PowerProtect Data Domain in multiple versions contains an integer overflow or wraparound vulnerability. An unauthenticated remote attacker could exploit this flaw, leading to a denial of service (DoS).
Risk Assessment
The risk involves potential disruption of the data storage system, which could result in unavailability of critical data and services for the organization.
Recommendation
It is recommended to immediately apply security patches provided by the vendor for affected versions and restrict network access to the system to trusted hosts only.
Original NVD description (English source)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.