CVE-2026-53482

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::
	cpe:2.3:o:dell:data_domain_operating_system::::::::

History

25 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Dell PowerProtect Data Domain, versiones 7.7.1.0 hasta 8.7, versión de lanzamiento LTS2026 8.6.1.0 hasta 8.6.1.10, versión de lanzamiento LTS2025 8.3.1.0 hasta 8.3.1.30, versiones de lanzamiento LTS2024 7.13.1.0 hasta 7.13.1.70 contienen una vulnerabilidad de desbordamiento de entero o wraparound. Un atacante no autenticado con acceso remoto podría potencialmente explotar esta vulnerabilidad, lo que lleva a una denegación de servicio.

Information

Published : 2026-07-08 14:17

Updated : 2026-10-25 20:10

NVD link : CVE-2026-53482

Mitre link : CVE-2026-53482

CVE.ORG link : CVE-2026-53482

JSON object : View

Products Affected

dell

data_domain_operating_system

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2026-53482", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53482", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-09T13:30:55.868978Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "PowerProtect Data Domain", "versions": [{"status": "affected", "version": "0", "lessThan": "8.8.0.0 or later", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "8.6.1.20 or later", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "8.3.1.40 or later", "versionType": "semver"}, {"status": "affected", "version": "0", "lessThan": "7.13.1.80 or later", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-08T14:17:04.000", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service."}, {"lang": "es", "value": "Dell PowerProtect Data Domain, versiones 7.7.1.0 hasta 8.7, versi\u00f3n de lanzamiento LTS2026 8.6.1.0 hasta 8.6.1.10, versi\u00f3n de lanzamiento LTS2025 8.3.1.0 hasta 8.3.1.30, versiones de lanzamiento LTS2024 7.13.1.0 hasta 7.13.1.70 contienen una vulnerabilidad de desbordamiento de entero o wraparound. Un atacante no autenticado con acceso remoto podr\u00eda potencialmente explotar esta vulnerabilidad, lo que lleva a una denegaci\u00f3n de servicio."}], "lastModified": "2026-10-25T20:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "064F56BA-B974-4133-9DFA-B13D503766AC", "versionEndExcluding": "7.13.1.80", "versionStartIncluding": "7.7.1.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB4BB568-B169-4202-94E0-8D808419241B", "versionEndExcluding": "8.3.1.40", "versionStartIncluding": "7.14.0.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA61361F-FED8-4936-A9F6-FFA35BE413F8", "versionEndExcluding": "8.6.1.20", "versionStartIncluding": "8.4.0.0"}, {"criteria": "cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BA45B0F-6A67-476D-9101-0DDC91B77D51", "versionEndExcluding": "8.8.0.0", "versionStartIncluding": "8.7.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}