CVE-2026-24504 is an improper input validation vulnerability affecting Dell PowerProtect Data Domain software in specified versions. The vulnerability allows a high privileged remote attacker to potentially execute arbitrary commands with root-level privileges due to insufficient validation of input data. The CVSS 3.1 base score is 7.2, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could lead to arbitrary command execution with root privileges by a high privileged remote attacker, compromising system confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the affected systems to trusted administrators only and monitor for unusual activity consistent with exploitation attempts.