CVE-2026-35074: OS Command Injection
Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS Command Injection vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35074?
CVE-2026-35074 is classified as a high severity vulnerability due to its potential for OS command injection by a high privileged attacker.
How do I fix CVE-2026-35074?
To mitigate CVE-2026-35074, update your Dell PowerProtect Data Domain system to the latest software version that addresses this vulnerability.
What versions of Dell PowerProtect Data Domain are affected by CVE-2026-35074?
CVE-2026-35074 affects Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7.0.0 and specific LTS versions from 8.3.1.0 to 8.3.1.20 and from 7.13.1.0 to 7.13.1.60.
What is the nature of the vulnerability in CVE-2026-35074?
CVE-2026-35074 involves improper neutralization of special elements leading to an OS command injection vulnerability.
Who can exploit CVE-2026-35074?
CVE-2026-35074 can potentially be exploited by a high privileged attacker who has access to the vulnerable system.