VULNERABILITY INTELLIGENCE
CVE-2026-26354
CVSS score8.1 HIGH
EPSS probability0.50%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain a stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution.
Weakness classification
- CWE-121: Stack-based Buffer Overflow
- CWE-787: Out-of-bounds Write
Primary references
- security_alert@emc.com — Vendor Advisory