CVE-2026-26943Disclosure(dell / data_domain_operating_system)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch dell data_domain_operating_system systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

dell CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

data_domain_operating_system
powerprotect_dp_series_appliance

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-04-20); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

dell

Products

data_domain_operating_systempowerprotect_dp_series_appliance

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

Disclosure

250.0%

General

125.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-20	2	Disclosure2
2026-04-21	1	General1
2026-04-22	1	Patch1

Full discourse4 posts

Giuseppe Paternicola@giuseppe_1337170d
Patch
🚨 HIGH: CVE-2026-26943 (CVSS 7.2) Dell PowerProtect Data Domain OS command injection flaw allows remote high-priv attackers to execute arbitrary commands as root. Affected: v7.7.1.0-8.6, LTS releases Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/uRzpYR7O4s
Post summary
The tweet announces a command injection flaw (CVE‑2026‑26943) in Dell PowerProtect Data Domain OS, highlighting its severity and urging users to apply the available patch immediately.
0000041
26 followersView on X
CVE@CVEnew170d
General
CVE-2026-26943 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 con… https://www.cve.org/CVERecord?id=CVE-2026-26943
Post summary
The snippet merely lists the CVE identifier and affected Dell PowerProtect Data Domain versions, without providing exploitation details, patches, or technical specifics.
00000106
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds171d
Disclosure
CVE-2026-26943 OS Command Injection in Dell PowerProtect Data Domain Multiple Versions https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26943
Post summary
The text announces CVE‑2026‑26943, an OS command injection vulnerability affecting multiple versions of Dell PowerProtect Data Domain, with no evidence of a PoC, exploit, active use, or available patch.
0000029
4.0K followersView on X
Kaitan ID Security@KaitanSecurity171d
Disclosure
⚠️ HIGH — CVE-2026-26943 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 … CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-26943 #Dell #CyberSecurity #InfoSec
Post summary
The tweet announces Dell PowerProtect Data Domain vulnerability CVE-2026-26943 with high severity (CVSS 7.2) and affected versions, but offers no PoC, exploit, patch, or active exploitation information.
000004
124 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	dell	data_domain_operating_system	-	-	-
App	dell	powerprotect_dp_series_appliance	-	-	-

Explore more

Back to dashboard dell CVEs data_domain_operating_system vulnerabilities

What researchers are saying

CVE-2026-26943

Giuseppe Paternicola[verified]@giuseppe_1337Patch

The tweet announces a command injection flaw (CVE‑2026‑26943) in Dell PowerProtect Data Domain OS, highlighting its severity and urging users to apply the available patch immediately.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The tweet announces Dell PowerProtect Data Domain vulnerability CVE-2026-26943 with high severity (CVSS 7.2) and affected versions, but offers no PoC, exploit, patch, or active exploitation information.

CVE@CVEnewGeneral

The snippet merely lists the CVE identifier and affected Dell PowerProtect Data Domain versions, without providing exploitation details, patches, or technical specifics.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces CVE‑2026‑26943, an OS command injection vulnerability affecting multiple versions of Dell PowerProtect Data Domain, with no evidence of a PoC, exploit, active use, or available patch.