Vulnerability Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of argument delimiters in a command ('argument injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Powerprotect Dp Series Appliance | < 2.7.9 |
| Dell | Data Domain Operating System | >= 7.7.1.0, < 7.13.1.70 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-35153?
CVE-2026-35153 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralizati...
How severe is CVE-2026-35153?
CVE-2026-35153 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35153?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Powerprotect Dp Series Appliance, Dell Data Domain Operating System.