CVE-2026-94346: Path Traversal

Q: Who is realistically exposed to this vulnerability?

PowerProtect Data Domain Virtual Edition deployments running the listed Feature Release, LTS2024, LTS2025, or LTS2026 version ranges are affected. Exploitation requires remote access and high privileges.

Q: What access does an attacker need to exploit it?

An attacker needs both remote access to the affected system and high privileges. No user interaction is required.

Q: What could successful exploitation allow?

Successful exploitation could lead to command execution. The stated impact includes high confidentiality, integrity, and availability impact.

Published Oct 27, 2026

Updated

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Affected Software

1 affected component

Dell PowerProtect Data Domain Virtual Edition>=7.7.1.0<=8.7, >=7.13.1.0<=7.13.1.70, >=8.3.1.0<=8.3.1.30, >=8.6.1.0<=8.6.1.10

Event History

Oct 27, 2026

CVE Published

via MITRE·01:23 PM

Data Sourced

via MITRE·01:23 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this vulnerability?

PowerProtect Data Domain Virtual Edition deployments running the listed Feature Release, LTS2024, LTS2025, or LTS2026 version ranges are affected. Exploitation requires remote access and high privileges.

What access does an attacker need to exploit it?

An attacker needs both remote access to the affected system and high privileges. No user interaction is required.

What could successful exploitation allow?