CVE-2026-23779 is a command injection vulnerability in Dell PowerProtect Data Domain's Data Domain Operating System across multiple specified versions. A local attacker with high privileges could exploit this vulnerability to execute arbitrary commands as root, potentially compromising the system's confidentiality, integrity, and availability. The vulnerability is identified as CWE-77 and has a CVSS 3.1 score of 6.7, reflecting medium severity. No vendor advisory or patch information is currently available, and no public exploits have been observed.

Successful exploitation could lead to full root-level control of the affected system by a high privileged local attacker, impacting confidentiality, integrity, and availability of the system. However, exploitation requires local access with high privileges, limiting the attack surface. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted administrators only and monitor for suspicious activity. Avoid granting unnecessary high privileges to users on affected systems.