CVE-2026-26951 is a stack-based buffer overflow vulnerability (CWE-121) affecting Dell PowerProtect Data Domain software versions 7.7.1.0 through 8.6, including LTS2025 release 8.3.1.0 through 8.3.1.20 and LTS2024 release 7.13.1.0 through 7.13.1.60. A local attacker with high privileges could exploit this vulnerability to execute arbitrary commands with root-level access. The CVSS v3.1 base score is 6.7, reflecting the requirement for local access and high privileges but with high impact on confidentiality, integrity, and availability. No vendor advisory or patch links are currently available, and no exploits have been reported in the wild.

Successful exploitation could lead to arbitrary command execution with root privileges on affected Dell PowerProtect Data Domain systems. This compromises system confidentiality, integrity, and availability. However, exploitation requires local access and high privileges, limiting the attack surface. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity. Avoid granting unnecessary high privileges to users on affected systems.