CVE-2026-24505
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability.
Published Apr 20, 2026 · updated Jun 17, 2026 · dell powerprotect dp series appliance
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 20, 2026 · NIST NVD
Detected
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Jun 17, 2026 · NIST NVD
Updated
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Affected
- cpe dell/data domain operating systemversion unspecified
- cpe dell/powerprotect dp series applianceversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-24505
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-24505
Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
nvd.nist.gov