CVE-2026-26942

Dell PowerProtect Data Domain versions 8.5–8.6 are affected by CVE-2026-26942, an OS command injection vulnerability caused by improper neutralization of special elements. The issue could allow a high-privileged attacker with remote access to execute arbitrary commands with root privileges. Affec...

EUVD-2026-23406

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command injection vulnerability. A high privileged attacker...

Dell PowerProtect Data Domain 安全漏洞

The Dell PowerProtect Data Domain is a data protection storage appliance that is primarily used for backup, archiving and disaster recovery. An information disclosure vulnerability exists in Dell PowerProtect Data Domain. The vulnerability stems from the system exposing sensitive information to...

The vulnerability of the RestAPI interface of the data protection software through backup with PowerProtect DataDomain, a data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the DataDomain OS operating system, allows unauthorized access to the compromised system by attackers.

The vulnerability of the RestAPI interface of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform,...

CVE-2025-43908

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

CVE-2025-43908

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

Backup to DataDomain over DDboost hangs

You are using DDBoost connection to a DataDomain device.Backup to the DataDomain device starts to hang.In the log of Veeam agent that is writing the data to the device you can see agent crash dump is...

Migrate Backups from NFS/SMB Data Domain Repository to DDBoost-based Repository

Purpose This article documents how to migrate existing restore points from an existing NFS or SMB repository to an integrated DDBoost-based repository. Use case: During initial deployment of Veeam Backup & Replication, the Data Domain storage appliance was added as an SMB share repository, and th...

Unable to add DataDomain DDBoost repository connected over Fibre Channel

Challenge When adding DataDomain as a backup repository using DDBoost over Fibre Channel, the following error is shown: Failed to connect to 'DFC-'. --tr:Unable to initialize Data Domain connection. --tr:Failed to call DoRpc. CmdName: DDBoostCheckConnection. invalid argument. Err: 5008 Failed to...

datadomain-exec.txt

SUMMARY ======= An arbitrary command execution vulnerability exists in the command line administration interface of the software used by DataDomain appliances. An attacker who is able to access the administration interface could exploit this vulnerability to install malicious software and use the...

DataDomain Web interface unfiltered shell characters

Unfiltered shell characters vulnerability in multiple Web interface commands...

Arbitrary Command Execution in DataDomain Administrator Interface

SUMMARY ======= An arbitrary command execution vulnerability exists in the command line administration interface of the software used by DataDomain appliances. An attacker who is able to access the administration interface could exploit this vulnerability to install malicious software and use the...