CVE-2026-23774

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, contain an OS command injection vulnerability. A high privileged attacker...

Vulnerabilities of the software for the centralized management of PowerProtect Data Domain Management Centers, the data protection software for corporate environments – PowerProtect Data Protection; the data protection software for data backup through PowerProtect Data Domain; the operating system EMC Data Domain OS; the data protection software for corporate environments using cloud technologies – APEX Protection Storage. These vulnerabilities allow attackers to exploit them to disclose protected information.

The vulnerabilities of the PowerProtect Data Domain Management Center software, a data protection tool for corporate environments, and the PowerProtect Data Protection software for data backup purposes are related to the lack of protection for SQL query structures. Exploiting these vulnerabilitie...