CVE-2026-53481: Path Traversal
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to the system. This is a critical severity vulnerability as it allows an attacker to take complete control of system; so Dell recommends customers to upgrade at the earliest opportunity.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell PowerProtect Data Domainto a version that resolves this vulnerability.Fixed in 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 - Compensating control
Upgrade PowerProtect Data Domain at the earliest opportunity to address the Path Traversal vulnerability (improper limitation of a pathname to a restricted directory), which could allow remote unauthenticated attackers to gain complete control of the system.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53481?
The severity of CVE-2026-53481 is critical with a score of 9.8.
How do I fix CVE-2026-53481?
To fix CVE-2026-53481, update the affected Dell PowerProtect Data Domain software to the latest version as specified in the security advisory.
What systems are affected by CVE-2026-53481?
CVE-2026-53481 affects Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and their LTS releases.
What type of vulnerability is CVE-2026-53481?
CVE-2026-53481 is a Path Traversal vulnerability that improperly limits a pathname to a restricted directory.
What are the potential impacts of CVE-2026-53481 if exploited?
If exploited, CVE-2026-53481 could allow unauthorized access to sensitive data or system resources.