Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command injection vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-17 | 1 | General1 |
| 2026-04-18 | 1 | Active Exploitation1 |
Attention, elevated activities detected targeting Dell PowerProtect Data Domain (CVE-2026-35073) https://vuldb.com/vuln/358073/cti
Post summary
The alert reports detected active exploitation attempts against Dell PowerProtect Data Domain for CVE‑2026‑35073, but lacks technical details or patch information.
CVE-2026-35073 Improper OS Command Injection in Dell PowerProtect Data Domain Ve... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35073 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The text delivers a brief alert for CVE-2026-35073, indicating an OS command injection issue in Dell PowerProtect Data Domain, but does not provide further specifics on exploitation, remediation, or active attacks.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | dell | data_domain_operating_system | - | - | - |
| OS | dell | data_domain_operating_system | 8.7.0.0 | - | - |