PowerProtect Data Domain vulnerabilities | LiveThreat CVE Feed

Product

PowerProtect Data Domain

by Dell · last CVE Oct 28, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities87 In the news0 Timeline

Severity mix

Critical 6High 35Medium 41Low 5

Severity

All severities87 Critical6 High35 Medium41 Low5

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add PowerProtect Data Domain to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-86385 New	8.8	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability Affected: before 8.9.0.0 or later
CVE-2026-86396 New	8.8	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-86398 New	8.8	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-56086	8.8	0%	Jul 8	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release… Affected: before 8.7.0.0 or later; before 8.6.1.20 or later; before 8.3.1.40 or later; before 7.13.1.80 or later
CVE-2026-26944	8.8	1%	Apr 20	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a… Affected: before 8.6.1.10, 8.7.0.0 or later; before 8.3.1.30 or later; before 7.13.1.70 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-23776	8.8	0%	Apr 17	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024… Affected: before 8.3.1.30 or later; before 7.13.1.70 or later; before 8.6.0.0 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2025-29987	8.8	1%	Apr 3	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability Affected: before 7.10.1.60
CVE-2026-23853	8.4	0%	Apr 17	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024… Affected: before 8.6.0.0 or later; before 8.3.1.20 or later; before 7.13.1.50 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-103779 New	8.3	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2023-44285	7.8	0%	Dec 14	Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability Affected: before 6.2.1.110; 7.0 before 7.12.0.0
CVE-2023-44277	7.8	1%	Dec 14	Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in the CLI Affected: before 6.2.1.110; 7.0 before 7.12.0.0
CVE-2026-53482	7.5	0%	Jul 8	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release… Affected: before 8.8.0.0 or later; before 8.6.1.20 or later; before 8.3.1.40 or later; before 7.13.1.80 or later
CVE-2026-110541 New	7.2	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-86380 New	7.2	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-86389 New	7.2	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-86393 New	7.2	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-86394 New	7.2	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-86399 New	7.2	–	Oct 28	Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through… Affected: before 8.9.0.0 or later; before 7.13.1.90 or later; before 8.3.1.50 or later; before 8.6.1.30 or later
CVE-2026-53479	7.2	2%	Jul 7	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release… Affected: before 8.8.0.0 or later; before 8.6.1.20 or later; before 8.3.1.40 or later; before 7.13.1.80 or later
CVE-2026-49814	7.2	2%	Jul 3	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release… Affected: before 8.8.0.0 or later; before 8.6.1.20 or later; before 8.3.1.40 or later; before 7.13.1.80 or later
CVE-2026-49815	7.2	2%	Jul 3	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release… Affected: before 8.8.0.0 or later; before 8.6.1.20 or later; before 8.3.1.40 or later; before 7.13.1.80 or later
CVE-2026-53478	7.2	2%	Jul 3	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release… Affected: through 8.8.0.0 or later; through 8.6.1.20 or later; through 8.3.1.40 or later; through 7.13.1.80 or later
CVE-2026-22761	7.2	1%	Apr 20	Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability Affected: before 8.6.1.10, 8.7.0.0 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-26942	7.2	1%	Apr 20	Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS command injection vulnerability Affected: before 8.6.1.10, 8.7.0.0 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-26943	7.2	1%	Apr 20	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS… Affected: before 8.6.1.10, 8.7.0.0 or later; before 8.3.1.30 or later; before 7.13.1.70 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-24506	7.2	1%	Apr 20	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an OS… Affected: before 8.6.1.10, 8.7.0.0 or later; before 8.3.1.30 or later; before 7.13.1.70 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-24505	7.2	0%	Apr 20	Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability Affected: before 8.6.1.10, 8.7.0.0 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-24504	7.2	0%	Apr 20	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an… Affected: before 8.6.1.10, 8.7.0.0 or later; before 8.3.1.30 or later; before 7.13.1.70 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2026-23774	7.2	1%	Apr 20	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024… Affected: before 8.6.0.0 or later; before 8.3.1.20 or later; before 7.13.1.50 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2025-46606	7.2	0%	Apr 17	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper restriction of excessive authentication… Affected: before 8.6.0.0 or later
CVE-2025-46605	7.2	0%	Apr 17	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability Affected: before 8.6.0.0 or later
CVE-2025-46607	7.2	0%	Apr 17	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability Affected: before 8.6.0.0 or later
CVE-2026-23778	7.2	1%	Apr 17	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024… Affected: before 8.6.0.0 or later; before 8.3.1.20 or later; before 7.13.1.50 or later; before 2.7.9 with DD OS 8.3.1.30
CVE-2023-48667	7.2	2%	Dec 14	Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injection vulnerability in administrator CLI Affected: before 6.2.1.110; 7.0 before 7.12.0.0
CVE-2026-41122	7.1	0%	Jul 8	Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release… Affected: before 8.8.0.0 or later; before 8.6.1.20 or later; before 8.3.1.40 or later; before 7.13.1.80 or later