Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Dell | PowerProtect Data Domain | unaffected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Dell | Powerprotect Data Domain | 100% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Tue, 07 Jul 2026 12:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection via Improper Neutralization in Dell PowerProtect Data Domain |
Mon, 06 Jul 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection Vulnerability in Dell PowerProtect Data Domain |
Mon, 06 Jul 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection Vulnerability in Dell PowerProtect Data Domain |
Mon, 06 Jul 2026 04:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection on Dell PowerProtect Data Domain Appliances |
Sun, 05 Jul 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection on Dell PowerProtect Data Domain Appliances |
Sun, 05 Jul 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection Vulnerability in Dell PowerProtect Data Domain due to Improper Neutralization of Special Elements |
Sun, 05 Jul 2026 01:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | OS Command Injection Vulnerability in Dell PowerProtect Data Domain due to Improper Neutralization of Special Elements |
Sat, 04 Jul 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Injection via Improper Input Neutralization |
Sat, 04 Jul 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Injection via Improper Input Neutralization |
Fri, 03 Jul 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Dell
Dell powerprotect Data Domain |
|
| Vendors & Products |
Dell
Dell powerprotect Data Domain |
Fri, 03 Jul 2026 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. | |
| Weaknesses | CWE-78 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: dell
Published:
Updated: 2026-07-07T13:12:36.741Z
Reserved: 2026-06-01T17:04:30.334Z
Link: CVE-2026-49813
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-07-07T12:00:07Z