CVE-2026-86378

Dell PowerProtect Data Domain contains an Out-of-bounds Write vulnerability. A low-privileged attacker with remote access could exploit it to cause a denial of service.

Dell PowerProtect Data Domain contains an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. A high privileged attacker with remote access could exploit it to execute commands.

Dell PowerProtect Data Domain contains an Improper Authentication vulnerability. A low privileged attacker with remote access could exploit it to bypass protection mechanisms.

Dell PowerProtect Data Domain contains an Allocation of Resources Without Limits or Throttling vulnerability. An unauthenticated attacker with remote access could exploit this vulnerability, leading to denial of service.

Dell PowerProtect Data Domain contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to command execution.

Dell PowerProtect Data Domain contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to elevation of privileges.

Dell PowerProtect Data Domain contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to denial of service.

Dell PowerProtect Data Domain contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Dell PowerProtect Data Domain contains an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to code execution.

Dell PowerProtect Data Domain contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for the attacker.