CVE Catalog

CVE-2026-86379

HighCVSS 7.2
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain Management Center contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to command execution.

Risk Assessment

Execution of arbitrary system commands by a privileged attacker could lead to compromise of the management center and the systems it manages.

Recommendation

Update Dell PowerProtect Data Domain Management Center to a patched version and restrict remote access to administrative interfaces.

Other vulnerabilities in Dell PowerProtect Data Domain Management Center

See all
Original NVD description (English source)

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS