CVE-2026-94347: High severity Dell PowerProtect Data Domain Virtual Edition vulnerability
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires a high-privileged attacker with remote access to the affected PowerProtect Data Domain Virtual Edition system. The provided information does not indicate that unauthenticated or low-privileged users can exploit it.
Which release lines are affected?
Affected versions are Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10.
What could exploitation allow?
A successful exploit could allow an attacker to bypass protection mechanisms. The vulnerability is rated high severity and is assessed as affecting confidentiality, integrity, and availability.