CVE-2026-46730 is an incorrect authorization vulnerability in Dell PowerProtect Data Domain affecting versions 7.7.1.0 through 8.7, LTS2026 release 8.6.1.0 through 8.6.1.10, LTS2025 release 8.3.1.0 through 8.3.1.30, and LTS2024 release 7.13.1.0 through 7.13.1.70. A high privileged attacker with local access could exploit this flaw to execute commands without proper authorization. The CVSS v3.1 base score is 4.2, reflecting low attack vector (local), low attack complexity, high privileges required, no user interaction, and limited impact on confidentiality, integrity, and availability. As of the published date, no official remediation or patch has been announced by Dell.

The vulnerability could allow a high privileged local attacker to perform unauthorized command execution on affected Dell PowerProtect Data Domain systems. This may lead to limited confidentiality, integrity, and availability impacts. There is no indication of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity consistent with unauthorized command execution attempts.