CVE-2026-94347

HighCVSS 7.2

Published: 27/10/2026(UTC)Updated: 29/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

PowerProtect Data Domain Virtual Edition in Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10 contains a Process Control vulnerability. A high-privileged attacker with remote access could exploit it to bypass protection mechanisms.

Risk Assessment

Bypassing protection mechanisms by a privileged attacker can undermine the backup and data protection system's safeguards. This may lead to unauthorized changes or loss of data integrity.

Recommendation

Apply the vendor-provided updates for the relevant release train (Feature, LTS2024, LTS2025, LTS2026). Restrict remote administrative access to necessary addresses and monitor privileged account activity.

Other vulnerabilities in PowerProtect Data Domain Virtual Edition

CVE-2026-94346High
PowerProtect Data Domain Virtual Edition in Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10 contains a Path Traversal vulnerability. A high-privileged attacker with remote access could exploit it to achieve command execution.

Original NVD description (English source)

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS