CVE-2026-35073: OS Command Injection
Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command injection vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35073?
CVE-2026-35073 is classified as a high severity vulnerability.
How do I fix CVE-2026-35073?
To fix CVE-2026-35073, update Dell PowerProtect Data Domain to a version beyond 8.7.0.0, 8.3.1.20, or 7.13.1.60.
What types of software are affected by CVE-2026-35073?
CVE-2026-35073 affects Dell PowerProtect Data Domain versions from 7.7.1.0 to 8.7.0.0, as well as specific LTS release versions.
What is the nature of the vulnerability in CVE-2026-35073?
CVE-2026-35073 involves improper neutralization of special elements leading to an OS command injection vulnerability.
Who can exploit CVE-2026-35073?
A high privileged attacker can exploit CVE-2026-35073 to execute OS commands on vulnerable systems.