CVE-2026-103780: Buffer Overflow

Q: Who is exposed to this vulnerability?

Deployments of Dell PowerProtect Data Domain running the listed Feature Release, LTS2024, LTS2025, or LTS2026 version ranges are exposed if an unauthenticated attacker can remotely reach the affected service.

Q: Does exploitation require credentials or user interaction?

No. The supplied severity vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What could an attacker achieve?

A successful exploit could lead to command execution on the affected system, with high impact to confidentiality, integrity, and availability.

Published Oct 28, 2026

Updated

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.

Affected Software

1 affected component

Dell PowerProtect Data Domain>=7.7.1.0<=8.8, >=7.13.1.0<=7.13.1.80, >=8.3.1.0<=8.3.1.40, >=8.6.1.0<=8.6.1.20

Event History

Oct 28, 2026

CVE Published

via MITRE·10:14 AM

Data Sourced

via MITRE·10:14 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this vulnerability?

Deployments of Dell PowerProtect Data Domain running the listed Feature Release, LTS2024, LTS2025, or LTS2026 version ranges are exposed if an unauthenticated attacker can remotely reach the affected service.

Does exploitation require credentials or user interaction?

No. The supplied severity vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What could an attacker achieve?