CVE-2026-23774Disclosure(dell / data_domain_operating_system)

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, contain an OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.

dell CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

data_domain_operating_system
powerprotect_dp_series_appliance

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-04-20); latest day: 2
4 total mentions across 2 days

Affected systems

Vendors

dell

Products

data_domain_operating_systempowerprotect_dp_series_appliance

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-20	2	Disclosure2
2026-04-21	2	Disclosure1General1

Full discourse4 posts

CVE@CVEnew171d
General
CVE-2026-23774 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1… https://www.cve.org/CVERecord?id=CVE-2026-23774
Post summary
A brief tweet with a link to the CVE record, listing affected versions but no further details.
00010129
57.2K followersView on X
Infoflowcloud@infoflowcloud171d
Disclosure
🚨*CVE* CVE-2026-23774 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1… https://www.cve.org/CVERecord?id=CVE-2026-23774 ----- Traducción: CVE-2026-23774 Del… http://infoflow.cloud`
Post summary
The post simply announces CVE-2026-23774 for Dell PowerProtect Data Domain, providing a link to the CVE record but offering no additional details on exploitation, mitigation, or technical specifics.
0000020
72 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds171d
Disclosure
CVE-2026-23774 OS Command Injection in Dell PowerProtect Data Domain DD OS Multiple Versions https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23774
Post summary
The post announces CVE‑2026‑23774, an OS command injection flaw in Dell PowerProtect Data Domain, but offers no PoC, exploit code, evidence of active exploitation, or patch details.
0000027
4.0K followersView on X
Kaitan ID Security@KaitanSecurity172d
Disclosure
⚠️ HIGH — CVE-2026-23774 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5… CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-23774 #Dell #CyberSecurity #InfoSec
Post summary
High‑severity CVE‑2026‑23774 disclosed for Dell PowerProtect Data Domain OS versions 7.7.1.0‑8.5 with a CVSS score of 7.2; no PoC, exploit, active‑exploitation, or patch information available.
000007
124 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	dell	data_domain_operating_system	-	-	-
App	dell	powerprotect_dp_series_appliance	-	-	-

Explore more

Back to dashboard dell CVEs data_domain_operating_system vulnerabilities

What researchers are saying

CVE-2026-23774

Kaitan ID Security[verified]@KaitanSecurityDisclosure

High‑severity CVE‑2026‑23774 disclosed for Dell PowerProtect Data Domain OS versions 7.7.1.0‑8.5 with a CVSS score of 7.2; no PoC, exploit, active‑exploitation, or patch information available.

CVE@CVEnewGeneral

A brief tweet with a link to the CVE record, listing affected versions but no further details.

Infoflowcloud@infoflowcloudDisclosure

The post simply announces CVE-2026-23774 for Dell PowerProtect Data Domain, providing a link to the CVE record but offering no additional details on exploitation, mitigation, or technical specifics.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE‑2026‑23774, an OS command injection flaw in Dell PowerProtect Data Domain, but offers no PoC, exploit code, evidence of active exploitation, or patch details.