Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2841 articles · 123210 vulns · 36/41 feeds (7d)
← Back to list
7.2
CVE-2026-24506EXPLOITEDPATCHED
dell · powerprotect data domain

CVE-2026-24506: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r

Description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution as root.

Affected Products

VendorProductVersions
dellpowerprotect data domain0, 0, 0, 0

References

  • https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities(vendor-advisory)

Related News (1 articles)

Tier C
VulDB7d ago
CVE-2026-24506 | Dell PowerProtect Data Domain up to 7.13.1.60/8.3.1.20/8.6 os command injection (dsa-2026-060)
→ No new info (linked only)
CVSS 3.17.2 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
8.6.1.108.7.0.0 or later8.3.1.30 or later7.13.1.70 or later2.7.9 with DD OS 8.3.1.30
CWECWE-78
PublishedApr 20, 2026
Last enriched7d agov2
Trending Score17
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

MEDIUMCVE-2026-25908
CVE-2026-25908: Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulne
Trending: 35
HIGHCVE-2026-26354
CVE-2026-26354: Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2
Trending: 26
PRE-CVE
Multiple Vulnerabilities in Dell Networking OS10, Dell Storage Monitoring and Reporting, Dell Storage Resource Manager, and Dell VxRail Appliance
Trending: 20
HIGHCVE-2026-23774EXP
CVE-2026-23774: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5,
Trending: 17
HIGHCVE-2026-26943EXP
CVE-2026-26943: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r
Trending: 17

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 20, 2026
Discovered by ZDM
Apr 20, 2026
Updated: severity, activelyExploited
Apr 20, 2026
Actively Exploited
Apr 22, 2026
Patch Available
Apr 22, 2026

Version History

v2
Last enriched 7d ago
v2Tier C7d ago

Updated severity to CRITICAL and marked the vulnerability as actively exploited.

severityactivelyExploited
via VulDB
v17d ago

Initial creation