Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2863 articles · 123188 vulns · 36/41 feeds (7d)
← Back to list
7.2
CVE-2026-26943EXPLOITEDPATCHED
dell · powerprotect data domain

CVE-2026-26943: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r

Description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Affected Products

VendorProductVersions
dellpowerprotect data domain0, 0, 0, 0

References

  • https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities(vendor-advisory)

Related News (1 articles)

Tier C
VulDB7d ago
CVE-2026-26943 | Dell PowerProtect Data Domain up to 7.13.1.60/8.3.1.20/8.6 os command injection (dsa-2026-060)
→ No new info (linked only)
CVSS 3.17.2 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
8.6.1.108.7.0.0 or later8.3.1.30 or later7.13.1.70 or later2.7.9 with DD OS 8.3.1.30
CWECWE-78
PublishedApr 20, 2026
Last enriched6d agov2
Trending Score18
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-26354
CVE-2026-26354: Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2
Trending: 26
PRE-CVE
Multiple Vulnerabilities in Dell Networking OS10, Dell Storage Monitoring and Reporting, Dell Storage Resource Manager, and Dell VxRail Appliance
Trending: 20
HIGHCVE-2026-24506EXP
CVE-2026-24506: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r
Trending: 18
HIGHCVE-2026-23774EXP
CVE-2026-23774: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5,
Trending: 18
HIGHCVE-2026-26944
CVE-2026-26944: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 r
Trending: 14

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 20, 2026
Discovered by ZDM
Apr 20, 2026
Updated: severity, activelyExploited
Apr 20, 2026
Actively Exploited
Apr 22, 2026
Patch Available
Apr 22, 2026

Version History

v2
Last enriched 6d ago
v2Tier C6d ago

Updated severity to CRITICAL and marked the vulnerability as actively exploited.

severityactivelyExploited
via VulDB
v17d ago

Initial creation