CVE-2026-68866: Path Traversal
PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires a high-privileged attacker with remote access to an affected Dell PowerProtect Data Domain system. The provided information does not indicate that low-privileged or unauthenticated attackers can exploit it.
Which releases are affected?
Affected Feature Release versions are 7.7.1.0 through 8.7. Affected LTS releases are LTS2024 versions 7.13.1.0 through 7.13.1.70, LTS2025 versions 8.3.1.0 through 8.3.1.30, and LTS2026 versions 8.6.1.0 through 8.6.1.10.
What is the expected impact if exploited?
The reported impact is denial of service. The supplied severity vector also indicates potential integrity and availability impact, while confidentiality impact is listed as none.