Vulnerability Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for critical function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. Exploitation requires an authenticated user to perform a specific action.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Powerprotect Dp Series Appliance | < 2.7.9 |
| Dell | Data Domain Operating System | >= 7.7.1.0, < 7.13.1.70 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-26944?
CVE-2026-26944 is a vulnerability with a CVSS score of 8.8 (HIGH). Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for ...
How severe is CVE-2026-26944?
CVE-2026-26944 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-26944?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Powerprotect Dp Series Appliance, Dell Data Domain Operating System.