CVE-2026-26951: dell data_domain_operating_system Stack-based Buffer Overflow

Vulnerability summary

CVE-2026-26951 is a medium (CVSS 6.7) Stack-based Buffer Overflow vulnerability in dell data_domain_operating_system. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.4% of scored vulnerabilities.

Timeline

1. 20-04-2026
   PublishedVulnerability first disclosed.
2. 22-04-2026
   Last modifiedVulnerability information updated.

Description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a stack-based buffer overflow vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).