Vulnerability Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS Command Injection vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Powerprotect Dp Series Appliance | < 2.7.9 |
| Dell | Data Domain Operating System | >= 7.7.1.0, < 7.13.1.70 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-35074?
CVE-2026-35074 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizati...
How severe is CVE-2026-35074?
CVE-2026-35074 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35074?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Powerprotect Dp Series Appliance, Dell Data Domain Operating System.