CVE-2026-53481

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-53481
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to the system. This is a critical severity vulnerability as it allows an attacker to take complete control of system; so Dell recommends customers to upgrade at the earliest opportunity.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*
History

25 Oct 2026, 20:10

Type Values Removed Values Added
Summary
  • (es) Dell PowerProtect Data Domain, versiones 7.7.1.0 a 8.7, versión de lanzamiento LTS2026 8.6.1.0 a 8.6.1.10, versión de lanzamiento LTS2025 8.3.1.0 a 8.3.1.30, versiones de lanzamiento LTS2024 7.13.1.0 a 7.13.1.70 contienen una limitación inadecuada de un nombre de ruta a un directorio restringido (’salto de ruta’) vulnerabilidad. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a un acceso no autorizado al sistema. Esta es una vulnerabilidad de gravedad crítica ya que permite a un atacante tomar el control completo del sistema; por lo que Dell recomienda a los clientes actualizar a la primera oportunidad.
Information

Published : 2026-07-07 13:16

Updated : 2026-10-25 20:10

NVD link : CVE-2026-53481

Mitre link : CVE-2026-53481

CVE.ORG link : CVE-2026-53481

JSON object : View

Products Affected

dell

  • data_domain_operating_system
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')