CVE-2026-24504 is an improper input validation vulnerability in Dell PowerProtect Data Domain affecting versions 7.7.1.0 through 8.6, and specific LTS2025 and LTS2024 releases. The vulnerability allows a remote attacker with high privileges to execute arbitrary commands as root. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level is currently documented by Dell.

Successful exploitation could lead to arbitrary command execution with root privileges on affected Dell PowerProtect Data Domain systems. This can compromise system confidentiality, integrity, and availability. The vulnerability requires the attacker to have high privileges and remote access, limiting the attack surface to privileged users with network access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to high privileged accounts on affected systems and monitor for suspicious activity related to command execution. Follow Dell's official communications for updates on patches or mitigations.