CVE-2026-103780

Dell PowerProtect Data Domain

CRITICAL 9.8

At a glance

Source: CVE.org
State: PUBLISHED
Published: 2026-10-28 10:14 UTC
Updated: 2026-10-29 10:45 UTC
Assigner: dell

Description

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.

Weaknesses (CWE)

CWE-121 — Stack-based Buffer Overflow

References

https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

Scores

Version	Score	Vector	Scored by
CVSS 3.1	CRITICAL 9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	dell

European references

ENISA EUVD · EUVD-2026-111990
GCVE · GCVE-0-2026-103780

Affected products

Product	Versions
Dell · PowerProtect Data Domain	affected 0 < 8.9.0.0 or later ; affected 0 < 7.13.1.90 or later ; affected 0 < 8.3.1.50 or later ; affected 0 < 8.6.1.30 or later

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
ENISA EUVD	ENISA — reproduction authorised, source acknowledged