CVE-2026-24504Disclosure(dell / data_domain_operating_system)

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • data_domain_operating_system
  • powerprotect_dp_series_appliance

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-04-20); latest day: 2
  • 4 total mentions across 2 days

Affected systems

Vendors
Products
data_domain_operating_systempowerprotect_dp_series_appliance

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-04-20: 2Mentions · 2026-04-21: 2Technical Details · 2026-04-20: 104-2004-21
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-202
Disclosure2
2026-04-212
General2
Full discourse4 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-24504 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 con… https://www.cve.org/CVERecord?id=CVE-2026-24504 ----- Traducción: CVE-2026-24504 Del… http://infoflow.cloud`

    Post summary

    The tweet merely cites CVE-2026-24504, lists affected Dell PowerProtect Data Domain versions, and links to the CVE record, without providing details on exploitation, patches, or technical specifics.

    0000020
    72 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-24504 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 con… https://www.cve.org/CVERecord?id=CVE-2026-24504

    Post summary

    The text lists the CVE, impacted product versions, and links to the official CVE record, but provides no additional technical or operational details.

    00000110
    57.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-24504 Arbitrary Command Execution via Improper Input Validation in Dell PowerProtect Data Domain https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24504

    Post summary

    The snippet announces CVE‑2026‑24504, a Dell PowerProtect Data Domain flaw that allows arbitrary command execution through improper input validation, and provides a link for further details.

    0000032
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-24504 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 … CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-24504 #Dell #CyberSecurity #InfoSec

    Post summary

    Dell PowerProtect Data Domain is affected by CVE‑2026‑24504 (CVSS 7.2) across specified versions; a detailed analysis is available via the provided link.

    000003
    124 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSdelldata_domain_operating_system---
Appdellpowerprotect_dp_series_appliance---

Explore more