CVE-2026-46730 is an incorrect authorization vulnerability in Dell PowerProtect Data Domain affecting versions 7.7.1.0 through 8.7 and certain LTS releases (8.6.1.0-8.6.1.10, 8.3.1.0-8.3.1.30, 7.13.1.0-7.13.1.70). A high privileged attacker with local access could exploit this issue to execute commands without proper authorization. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) reflects that the attack requires local access and high privileges, with low complexity and no user interaction, potentially impacting confidentiality, integrity, and availability to a limited extent. The vendor has not published an official fix or remediation level, and no exploits are known in the wild.

An attacker with high privileges and local access could leverage this vulnerability to execute unauthorized commands on affected Dell PowerProtect Data Domain systems. This could lead to limited confidentiality, integrity, and availability impacts. The medium CVSS score reflects the requirement for high privileges and local access, reducing the overall risk compared to remote or lower privilege vulnerabilities.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor Dell's security advisories for updates. In the meantime, restrict local access to trusted administrators only and review privilege assignments to minimize exposure.