Description
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Published: 2026-10-27
Score: 7.2 High
EPSS: n/a
KEV: No
Impact: Protection Mechanism Bypass
Action: Patch Immediately
AI Analysis

Impact

The vulnerability is a process control flaw present in Dell PowerProtect Data Domain Virtual Edition, allowing a high‑privileged attacker with remote access to bypass the product's protection mechanisms. This flaw can be exploited to execute arbitrary actions or gain elevated privileges, as indicated by its association with CWE‑114.

Affected Systems

Affected are Dell PowerProtect Data Domain Virtual Edition Feature Release versions 7.7.1.0 through 8.7, LTS 2024 release versions 7.13.1.0 through 7.13.1.70, LTS 2025 release versions 8.3.1.0 through 8.3.1.30, and LTS 2026 release versions 8.6.1.0 through 8.6.1.10.

Risk and Exploitability

The CVSS score of 7.2 indicates a high severity, and although an EPSS score is not available, the lack of a listed KEV status suggests that at the time of this review no widespread exploitation has been documented. Nonetheless, the flaw can be triggered remotely by an attacker with elevated privileges, so the risk remains significant. Prompt mitigation is advised to prevent potential bypass of data protection.

Generated by OpenCVE AI on October 27, 2026 at 15:05 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Dell PowerProtect Data Domain security update described in the Dell support advisory (https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities).
  • Limit remote administrative access to the affected systems, enforcing strict network segmentation and firewall rules.
  • Continuously monitor system logs and audit trails for suspicious activity that could indicate an attempt to exploit process control.

Generated by OpenCVE AI on October 27, 2026 at 15:05 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Title Process Control Flaw Enabling Remote Protection Bypass in Dell PowerProtect Data Domain Virtual Edition

Tue, 27 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
Description PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Weaknesses CWE-114
References
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-10-27T13:28:14.623Z

Reserved: 2026-09-21T10:04:43.315Z

Link: CVE-2026-94347

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-27T14:17:05.950

Modified: 2026-10-27T14:58:57.680

Link: CVE-2026-94347

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T15:15:04Z

Weaknesses