A CVE has identified an integer overflow or wraparound vulnerability in Dell PowerProtect Data Domain. An attacker who holds high‑privilege credentials and has remote access could exploit this weakness to bypass the appliance’s protection mechanisms, thereby threatening data integrity and the overall security of the storage environment.

Dell PowerProtect Data Domain installations are affected, specifically Feature Release versions 7.7.1.0 through 8.8, LTS 2024 release 7.13.1.0 through 7.13.1.80, LTS 2025 release 8.3.1.0 through 8.3.1.40, and LTS 2026 release 8.6.1.0 through 8.6.1.20.

The vulnerability carries a CVSS score of 7.2, indicating high severity. No EPSS score is available, and the issue is not listed in CISA’s KEV catalog. Because the description specifies that a high‑privileged attacker with remote access can achieve a protection mechanism bypass, the likely attack vector is remote. While the exact exploitation likelihood is not quantified, the high severity rating and privileged remote exploitation path elevate the risk to organizations that run the affected versions.