CVE-2026-49815: high vulnerability (CVSS 7.2)
CVE-2026-49815 affects Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and specific LTS releases, allowing high-privileged remote attackers to execute arbitrary OS commands via improper input neutralization. CVSS score is 7.2, marking it as a high-severity vulnerability.
Admins should prioritize patching affected PowerProtect Data Domain versions. Restrict remote access and monitor privileged account activity to mitigate exploitation risks while patches are applied.
CVE-2026-49815 is a high-severity OS command injection vulnerability in Dell PowerProtect Data Domain, affecting versions 7.7.1.0 through 8.7 and specific LTS releases. Improper neutralization of special elements in OS commands allows attackers to execute arbitrary commands.
Exploitation requires high-privileged access and remote connectivity. If successfully exploited, this flaw could compromise system integrity, allowing attackers to run unauthorized commands on the target system.
Dell has released patches for the affected versions. Administrators are strongly advised to apply these updates immediately, restrict remote access, and monitor privileged accounts to reduce the attack surface and detect potential abuse.