CVE-2026-35154: Medium severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges to access unauthorized delete operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35154?
CVE-2026-35154 is rated as a high severity vulnerability due to improper privilege management in Dell PowerProtect Data Domain appliances.
How do I fix CVE-2026-35154?
To fix CVE-2026-35154, upgrade your Dell PowerProtect Data Domain appliances to a version that includes the security update for this vulnerability.
Which versions of Dell PowerProtect Data Domain are affected by CVE-2026-35154?
CVE-2026-35154 affects Dell PowerProtect Data Domain appliances from versions 7.7.1.0 to 8.7.0.0 and specific LTS releases.
What type of attack is possible due to CVE-2026-35154?
Due to CVE-2026-35154, a high privileged attacker with local access could exploit improper privilege management to compromise the system.
Is there a workaround for CVE-2026-35154?
There are no officially recommended workarounds for CVE-2026-35154, and the best mitigation is to apply the security update.