CVE-2026-90725: Buffer Overflow

Q: Who can exploit this vulnerability?

Exploitation requires a high-privileged attacker with remote access to an affected Dell PowerProtect Data Domain system. The supplied information does not indicate that unauthenticated or low-privileged users can exploit it.

Q: What is the expected impact if exploitation succeeds?

Successful exploitation could cause a denial of service. No confidentiality or integrity impact is identified in the provided severity vector.

Q: Which releases are affected?

Affected Feature Release versions are 7.7.1.0 through 8.8. Affected LTS releases are LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20.

Published Oct 27, 2026

Updated

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

Affected Software

1 affected component

Dell PowerProtect Data Domain>=7.7.1.0<=8.8, >=7.13.1.0<=7.13.1.80, >=8.3.1.0<=8.3.1.40, >=8.6.1.0<=8.6.1.20

Event History

Oct 27, 2026

CVE Published

via MITRE·01:47 PM

Data Sourced

via MITRE·01:47 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

Exploitation requires a high-privileged attacker with remote access to an affected Dell PowerProtect Data Domain system. The supplied information does not indicate that unauthenticated or low-privileged users can exploit it.

What is the expected impact if exploitation succeeds?

Successful exploitation could cause a denial of service. No confidentiality or integrity impact is identified in the provided severity vector.

Which releases are affected?