CVE-2026-46463

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::

History

25 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Dell PowerProtect Data Domain, versiones 7.7.1.0 hasta 8.7, versión de lanzamiento LTS2026 8.6.1.0 hasta 8.6.1.10, versión de lanzamiento LTS2025 8.3.1.0 hasta 8.3.1.30, versiones de lanzamiento LTS2024 7.13.1.0 hasta 7.13.1.70 contienen una vulnerabilidad de desbordamiento de entero o wraparound. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que llevaría a una denegación de servicio.

Information

Published : 2026-07-03 14:16

Updated : 2026-10-25 21:10

NVD link : CVE-2026-46463

Mitre link : CVE-2026-46463

CVE.ORG link : CVE-2026-46463

JSON object : View

Products Affected

dell

data_domain_operating_system

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2026-46463", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46463", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-06T16:28:04.886427Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "PowerProtect Data Domain", "versions": [{"status": "affected", "version": "0", "lessThan": "8.8.0.0 or later", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "8.6.1.20 or later", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "8.3.1.40 or later", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "7.13.1.80 or later", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-03T14:16:29.660", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service."}, {"lang": "es", "value": "Dell PowerProtect Data Domain, versiones 7.7.1.0 hasta 8.7, versi\u00f3n de lanzamiento LTS2026 8.6.1.0 hasta 8.6.1.10, versi\u00f3n de lanzamiento LTS2025 8.3.1.0 hasta 8.3.1.30, versiones de lanzamiento LTS2024 7.13.1.0 hasta 7.13.1.70 contienen una vulnerabilidad de desbordamiento de entero o wraparound. Un atacante no autenticado con acceso remoto podr\u00eda potencialmente explotar esta vulnerabilidad, lo que llevar\u00eda a una denegaci\u00f3n de servicio."}], "lastModified": "2026-10-25T21:10:00.770", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D81B827B-47D1-4856-ABEE-7FDB8599AD42", "versionEndIncluding": "7.13.1.70", "versionStartIncluding": "7.7.1.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A1E837C-2175-494D-8C20-EB25AE30F07F", "versionEndIncluding": "8.3.1.30", "versionStartIncluding": "8.0.0.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFF0094F-0C71-461F-9760-E9E0AB269FE1", "versionEndIncluding": "8.7.0.0", "versionStartIncluding": "8.4.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}