{"dataType":"CVE_RECORD","dataVersion":"5.0","cveMetadata":{"cveId":"GCVE-110-NCSC-2026-460","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-10-30T09:10:19Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"nl","value":"PowerProtect Data Domain versions 7.7.1.0 through 8.7 and LTS2024-2026 releases have a Relative Path Traversal vulnerability in the certificate that can enable a high privileged remote attacker to cause a Denial of Service.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have an Out-of-bounds Write vulnerability enabling a low privileged remote attacker to cause Denial of Service.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases contain a stack-based buffer overflow vulnerability enabling low privileged remote attackers to gain unauthorized access.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8 and select LTS releases contain a high-severity OS command injection vulnerability enabling remote attackers with high privileges to execute arbitrary commands.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have an Integer Overflow vulnerability enabling high privileged remote attackers to bypass protection mechanisms.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, including certain LTS2025 and LTS2026 releases, contain a path traversal vulnerability enabling a high privileged remote attacker to cause information disclosure.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024-2026 releases have a vulnerability involving hard-coded cryptographic keys that may allow unauthenticated remote attackers to expose credentials and gain privileged access.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 contain a vulnerability that permits a low privileged remote attacker to potentially escalate privileges due to improper privilege drop verification.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have an Integer Overflow vulnerability enabling high privileged remote code execution.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have a Missing Authorization vulnerability allowing low privileged remote attackers unauthorized access.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases contain an authentication bypass by spoofing vulnerability enabling low privileged remote attackers to cause denial of service.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have an Improper Privilege Management vulnerability enabling high privileged remote attackers to escalate privileges.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and various LTS releases have an OS Command Injection vulnerability allowing high privileged remote attackers to execute arbitrary commands.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain Virtual Edition versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have a high-severity OS Command Injection vulnerability enabling high privileged remote attackers to execute arbitrary commands.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and various LTS releases have an OS Command Injection vulnerability allowing low privileged remote attackers to execute arbitrary commands.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024-2026 releases have a critical Improper Authentication vulnerability enabling unauthenticated remote attackers to create privileged accounts and gain full system control.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and various LTS releases have a path traversal vulnerability enabling low privileged remote attackers to gain unauthorized filesystem access.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and various LTS releases have a critical Improper Authentication vulnerability enabling unauthenticated remote attackers to execute arbitrary commands with root privileges.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8 and various LTS releases have an authentication bypass vulnerability enabling low-privileged remote attackers to escalate privileges and affect other managed Data Domain systems.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases contain a vulnerability in integrity check validation that allows a high privileged local attacker to bypass protection mechanisms.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have a Path Traversal vulnerability enabling a high privileged local attacker to cause Denial of Service.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and LTS2024 to LTS2026 releases have an Improper Privilege Management vulnerability enabling high privileged local attackers to escalate privileges.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and LTS2024 to LTS2026 releases have an Improper Privilege Management vulnerability enabling high privileged remote attackers to escalate privileges.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and LTS2024 to LTS2026 releases have an Improper Access Control vulnerability enabling unauthenticated remote attackers to cause denial of service.","supportingMedia":null},{"lang":"nl","value":"PowerProtect Data Domain Virtual Edition versions 7.7.1.0 through 8.7 and various LTS2024, LTS2025, and LTS2026 releases have a Path Traversal vulnerability enabling high privileged remote attackers to execute commands.","supportingMedia":null},{"lang":"nl","value":"PowerProtect Data Domain Virtual Edition versions 7.7.1.0 through 8.7 and various LTS releases have a Process Control vulnerability enabling a high privileged remote attacker to bypass protection mechanisms.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024-2026 releases have an Improper Authentication vulnerability allowing low privileged remote attackers to bypass protection mechanisms.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases have a stack-based buffer overflow vulnerability enabling unauthenticated remote command execution.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8 and LTS2024-2026 releases have an SQL Injection vulnerability enabling low-privileged remote attackers to gain unauthorized access to managed systems.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases contain a Missing Authorization vulnerability enabling low privileged remote attackers to perform unauthorized operations on managed systems.","supportingMedia":null},{"lang":"nl","value":"Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8 and LTS2024 to LTS2026 releases contain a Missing Authorization vulnerability enabling low privileged remote attackers to perform unauthorized operations.","supportingMedia":null}],"references":[{"url":"https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0460.json","name":"","tags":["advisory"]},{"url":"https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-68866.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86377.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86378.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86379.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86380.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86383.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86384.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86385.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86389.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86390.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86391.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86393.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86394.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86395.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86396.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86397.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86398.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86399.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86400.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-90717.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-90718.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-90720.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-90726.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-90728.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-90729.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-90730.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94346.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-94347.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-103779.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-103780.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-103792.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-103799.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-110540.json","name":"","tags":["advisory"]},{"url":"https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-110541.json","name":"","tags":["advisory"]}],"metrics":[{"format":"","scenarios":null,"cvssV2_0":null,"cvssV3_0":null,"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","baseScore":7.1,"baseSeverity":"HIGH"},"cvssV4_0":null,"other":null}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Relative Path Traversal","cweId":"CWE-23","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Out-of-bounds Write","cweId":"CWE-787","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Stack-based Buffer Overflow","cweId":"CWE-121","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","cweId":"CWE-78","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Integer Overflow or Wraparound","cweId":"CWE-190","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","cweId":"CWE-22","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Use of Hard-coded Cryptographic Key","cweId":"CWE-321","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Check for Dropped Privileges","cweId":"CWE-273","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Missing Authorization","cweId":"CWE-862","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Authentication Bypass by Spoofing","cweId":"CWE-290","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Validation of Integrity Check Value","cweId":"CWE-354","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Path Traversal: '..\\filedir'","cweId":"CWE-28","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Path Traversal: 'dir\\..\\..\\filename'","cweId":"CWE-31","type":"CWE"}]},{"descriptions":[{"lang":"en","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","cweId":"CWE-89","type":"CWE"}]}],"affected":[{"vendor":"Dell","product":"vers:unknown/*","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null,"x_vulnetix_aliases":{"direct":["CVE-2026-103779","CVE-2026-103780","CVE-2026-103792","CVE-2026-103799","CVE-2026-110540","CVE-2026-110541","CVE-2026-68866","CVE-2026-86377","CVE-2026-86378","CVE-2026-86379","CVE-2026-86380","CVE-2026-86383","CVE-2026-86384","CVE-2026-86385","CVE-2026-86389","CVE-2026-86390","CVE-2026-86391","CVE-2026-86393","CVE-2026-86394","CVE-2026-86395","CVE-2026-86396","CVE-2026-86397","CVE-2026-86398","CVE-2026-86399","CVE-2026-86400","CVE-2026-90717","CVE-2026-90718","CVE-2026-90720","CVE-2026-90726","CVE-2026-90728","CVE-2026-90729","CVE-2026-90730","CVE-2026-94346","CVE-2026-94347"]}},"adp":null}}