CVE-2026-86379: OS Command Injection
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires a high-privileged attacker with remote access to Dell PowerProtect Data Domain Management Center. The provided information does not indicate that an unauthenticated or low-privileged user can exploit it.
What is the impact of successful exploitation?
A successful exploit could allow OS command execution. The supplied severity vector indicates high impact to confidentiality, integrity, and availability.
Which releases should be reviewed for exposure?
Review Feature Release versions 7.7.1.0 through 8.8, LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20.