CVE-2026-24505 is an improper input validation vulnerability in Dell PowerProtect Data Domain versions 8.5 through 8.6. It allows a remote attacker with high privileges to execute arbitrary commands as root due to insufficient validation of input data. The vulnerability is rated high severity with a CVSS 3.1 score of 7.2 (Network attack vector, low attack complexity, high privileges required, no user interaction, impacts confidentiality, integrity, and availability). No patch or official remediation level has been disclosed by Dell as of the publication date.

Successful exploitation could lead to arbitrary command execution with root privileges on affected Dell PowerProtect Data Domain systems. This compromises system confidentiality, integrity, and availability. The attacker must have high privileges and remote access to exploit this vulnerability. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to trusted administrators with high privileges and monitor for suspicious activity related to command execution on affected systems.