CVE-2026-90727: Path Traversal
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an attacker to have high privileges and remote access to an affected Dell PowerProtect Data Domain system. The provided information does not indicate that unauthenticated or low-privileged users can exploit it.
Which releases are affected?
Affected Feature Release versions are 7.7.1.0 through 8.8. Affected LTS releases are LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20.
What is the likely impact if exploitation succeeds?
Successful exploitation could allow information tampering. The supplied severity vector indicates integrity and availability impact, with no confidentiality impact stated.