VULNERABILITY INTELLIGENCE

CVE-2026-28263

CVSS score5.9 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-04-17
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a cross-site Scripting vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.

Weakness classification

  • security_alert@emc.com: CWE-79

Primary references