CVE-2026-53482
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Dell PowerProtect Data Domain in multiple versions contains an integer overflow or wraparound vulnerability. An unauthenticated remote attacker could exploit this flaw, leading to a denial of service (DoS).
Risk Assessment
The risk involves potential disruption of the data storage system, which could result in unavailability of critical data and services for the organization.
Recommendation
It is recommended to immediately apply security patches provided by the vendor for affected versions and restrict network access to the system to trusted hosts only.
Other vulnerabilities in Dell PowerProtect Data Domain
See all- CVE-2026-53483Critical
An improper authentication vulnerability has been discovered in Dell PowerProtect Data Domain. An unauthenticated attacker with remote access could exploit this flaw to gain unauthorized access. This is a critical severity vulnerability as it allows complete system takeover.
- CVE-2026-53481Critical
A path traversal vulnerability has been discovered in Dell PowerProtect Data Domain. An unauthenticated attacker with remote access could exploit this flaw to gain unauthorized access to the system. This is a critical severity vulnerability as it allows complete system compromise.
- CVE-2026-56086High
Dell PowerProtect Data Domain in multiple versions contains an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
- CVE-2026-53480Low
A path traversal vulnerability in Dell PowerProtect Data Domain allows a highly privileged remote attacker to modify files outside the restricted directory. The issue affects multiple versions including LTS2024, LTS2025, and LTS2026 releases.
- CVE-2026-41122High
Dell PowerProtect Data Domain in multiple versions contains a stored cross-site scripting vulnerability. An unauthenticated attacker with remote access could exploit this flaw.
- CVE-2026-53479High
Dell PowerProtect Data Domain products in multiple versions contain an OS command injection vulnerability. This flaw allows a remote high-privileged attacker to bypass protection mechanisms.
- CVE-2026-53478High
Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high privileged attacker with remote access could exploit this flaw to execute arbitrary commands.
- CVE-2026-49815High
Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high-privileged attacker with remote access could exploit this flaw to execute arbitrary OS commands.
- CVE-2026-49814High
Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high-privileged attacker with remote access could exploit this flaw to execute arbitrary commands.
- CVE-2026-49813Medium
Dell PowerProtect Data Domain in multiple versions contains an OS command injection vulnerability. A high privileged attacker with local access could exploit this flaw to execute arbitrary commands.
Original NVD description (English source)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.