CVE-2026-23778General(dell / data_domain_operating_system)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch dell data_domain_operating_system systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability to gain root-level access.

dell CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Weakness type (CWE)

CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

data_domain_operating_system
powerprotect_dp_series_appliance

Threat summary

Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 1d ago at 3 mentions (2026-04-17); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

dell

Products

data_domain_operating_systempowerprotect_dp_series_appliance

Deep dive

Activity timeline4 mentions / 2d

Signal classification3 categories

General

250.0%

Disclosure

125.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-17	3	Disclosure1General2
2026-04-28	1	Patch1

Full discourse4 posts

Giuseppe Paternicola@giuseppe_1337164d
Patch
🚨 HIGH Severity Alert CVE-2026-23778 | CVSS 7.2 Dell PowerProtect Data Domain DD OS versions 7[.]7[.]1[.]0-8.5 affected by command injection flaw. High-privileged remote attackers can gain root access. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/U8jkQvcS4w
Post summary
A high‑severity command injection vulnerability in Dell PowerProtect Data Domain (CVE‑2026‑23778) is highlighted, with the tweet urging users to patch immediately; no PoC, exploit, or active exploitation evidence is mentioned.
0000052
27 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds174d
General
CVE-2026-23778 Command Injection Vulnerability in Dell PowerProtect Data Domain DD OS Multiple Versions https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23778
Post summary
The snippet only lists a CVE identifier and a brief descriptor, providing no concrete evidence of exploitation, patching, or technical depth.
0000034
4.0K followersView on X
CVE@CVEnew174d
General
CVE-2026-23778 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1… https://www.cve.org/CVERecord?id=CVE-2026-23778
Post summary
The text lists affected versions of Dell PowerProtect Data Domain and provides a link to the CVE record, but contains no evidence of PoC, exploit code, active exploitation, patches, or technical details.
0000042
57.2K followersView on X
Kaitan ID Security@KaitanSecurity174d
Disclosure
⚠️ HIGH — CVE-2026-23778 Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5… CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-23778 #Dell #CyberSecurity #InfoSec
Post summary
A high‑severity vulnerability (CVE‑2026‑23778) has been disclosed for Dell PowerProtect Data Domain OS versions 7.7.1.0 through 8.5, with a CVSS score of 7.2; no PoC, exploit code, patch, or active exploitation details are provided.
000002
145 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	dell	data_domain_operating_system	-	-	-
App	dell	powerprotect_dp_series_appliance	-	-	-

Explore more

Back to dashboard dell CVEs data_domain_operating_system vulnerabilities

What researchers are saying

CVE-2026-23778

Giuseppe Paternicola[verified]@giuseppe_1337Patch

A high‑severity command injection vulnerability in Dell PowerProtect Data Domain (CVE‑2026‑23778) is highlighted, with the tweet urging users to patch immediately; no PoC, exploit, or active exploitation evidence is mentioned.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

A high‑severity vulnerability (CVE‑2026‑23778) has been disclosed for Dell PowerProtect Data Domain OS versions 7.7.1.0 through 8.5, with a CVSS score of 7.2; no PoC, exploit code, patch, or active exploitation details are provided.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The snippet only lists a CVE identifier and a brief descriptor, providing no concrete evidence of exploitation, patching, or technical depth.

CVE@CVEnewGeneral

The text lists affected versions of Dell PowerProtect Data Domain and provides a link to the CVE record, but contains no evidence of PoC, exploit code, active exploitation, patches, or technical details.