CVE-2026-103780
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release…
- Risk score
- 64/100
- CVSS
- 9.8 v3.1
- Published
- 28 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Dell PowerProtect Data Domain has a Stack-based Buffer Overflow vulnerability, allowing an unauthenticated attacker to potentially exploit this vulnerability, leading to command execution.
- Affected
- {'products': ['Dell PowerProtect Data Domain'], 'packages': [], 'versions': ['7.7.1.0 through 8.8', 'LTS2024 release versions 7.13.1.0 through 7.13.1.80', 'LTS2025 release versions 8.3.1.0 through 8.3.1.40', 'LTS2026 release versions 8.6.1.0 through 8.6.1.20']}
- Fix
- Check the linked advisory for the concrete fix
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.8 critical
- Remotely exploitable without logging in
References
Original description
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.
Last activity 28 Oct 2026. Patch Forecast updates every hour.