Threat database

739 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.7	EPSS 0.6%	CVE-2026-49813PowerProtect Data Domain · OS Command Injection Medium6.7EPSS 0.6%2026-07-03CVE Database V5CVE-2026-49813 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution. EPSS 0.6%Vulnerability Dell #cwe-78	CVE Database V5	2026-07-03
High	7.2	EPSS 2.0%	CVE-2026-49814PowerProtect Data Domain · OS Command Injection High7.2EPSS 2.0%2026-07-03CVE Database V5CVE-2026-49814 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution. EPSS 2.0%Vulnerability Dell #cwe-78	CVE Database V5	2026-07-03
High	7.2	EPSS 1.7%	CVE-2026-49815PowerProtect Data Domain · OS Command Injection High7.2EPSS 1.7%2026-07-03CVE Database V5CVE-2026-49815 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special Elements used in an OS command ('OS command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to execution of arbitrary OS commands. EPSS 1.7%Vulnerability Dell #cwe-78	CVE Database V5	2026-07-03
High	7.2	EPSS 2.0%	CVE-2026-53478PowerProtect Data Domain · OS Command Injection High7.2EPSS 2.0%2026-07-03CVE Database V5CVE-2026-53478 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. EPSS 2.0%Vulnerability Dell #cwe-78	CVE Database V5	2026-07-03
Medium	6.5	EPSS 0.3%	CVE-2026-46463PowerProtect Data Domain · Integer Overflow or Wraparound Medium6.5EPSS 0.3%2026-07-03CVE Database V5CVE-2026-46463 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service. EPSS 0.3%Vulnerability Dell #cwe-190	CVE Database V5	2026-07-03
Medium	4.9	EPSS 0.6%	CVE-2026-46464PowerProtect Data Domain · Link Following Medium4.9EPSS 0.6%2026-07-03CVE Database V5CVE-2026-46464 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper link resolution before file access ('Link following') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. EPSS 0.6%Vulnerability Dell #cwe-59	CVE Database V5	2026-07-03
Medium	5.5	EPSS 0.4%	CVE-2026-46465PowerProtect Data Domain · Use of Externally-Controlled Format String Medium5.5EPSS 0.4%2026-07-03CVE Database V5CVE-2026-46465 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of externally-controlled format string vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and denial of service. EPSS 0.4%Vulnerability Dell #cwe-134	CVE Database V5	2026-07-03
Low	2.7	EPSS 0.2%	CVE-2026-46466PowerProtect Data Domain · Use of Less Trusted Source Low2.7EPSS 0.2%2026-07-03CVE Database V5CVE-2026-46466 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of less trusted source vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information tampering. EPSS 0.2%Vulnerability Dell #cwe-348	CVE Database V5	2026-07-03
Medium	5.8	EPSS 0.1%	CVE-2026-46467PowerProtect Data Domain · Insertion of Sensitive Information into Log File Medium5.8EPSS 0.1%2026-07-03CVE Database V5CVE-2026-46467 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure. EPSS 0.1%Vulnerability Dell #cwe-532	CVE Database V5	2026-07-03
Medium	4.4	EPSS 0.2%	CVE-2026-46468PowerProtect Data Domain · Link Following Medium4.4EPSS 0.2%2026-07-03CVE Database V5CVE-2026-46468 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper link resolution before file access ('Link following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure. EPSS 0.2%Vulnerability Dell #cwe-59	CVE Database V5	2026-07-03
Medium	4.2	EPSS 0.2%	CVE-2026-46730PowerProtect Data Domain · Incorrect Authorization Medium4.2EPSS 0.2%2026-07-03CVE Database V5CVE-2026-46730 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an incorrect authorization vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized command execution. EPSS 0.2%Vulnerability Dell #cwe-863	CVE Database V5	2026-07-03
Low	3.3	EPSS 0.1%	CVE-2026-56085PowerProtect Data Domain · Use of Uninitialized Resource Low3.3EPSS 0.1%2026-07-03CVE Database V5CVE-2026-56085 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of uninitialized resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure. EPSS 0.1%Vulnerability Dell #cwe-908	CVE Database V5	2026-07-03
Medium	6.5	EPSS 1.8%	CVE-2026-26355PowerProtect Data Domain · OS Command Injection Medium6.5EPSS 1.8%2026-07-03CVE Database V5CVE-2026-26355 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special Elements used in an OS command ('OS command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. EPSS 1.8%Vulnerability Dell #cwe-78	CVE Database V5	2026-07-03
Medium	6.7	EPSS 0.6%	CVE-2026-54483PowerProtect Data Domain · OS Command Injection Medium6.7EPSS 0.6%2026-07-03CVE Database V5CVE-2026-54483 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. EPSS 0.6%Vulnerability Dell #cwe-78	CVE Database V5	2026-07-03
Medium	4.3	EPSS 0.3%	CVE-2026-41123PowerProtect Data Domain · Improper Access Control Medium4.3EPSS 0.3%2026-07-03CVE Database V5CVE-2026-41123 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper access control vulnerability in the RBAC. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information tampering. EPSS 0.3%Vulnerability Dell #cwe-284	CVE Database V5	2026-07-03
Low	2.3	EPSS 0.2%	CVE-2026-41124PowerProtect Data Domain · Path Traversal Low2.3EPSS 0.2%2026-07-03CVE Database V5CVE-2026-41124 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. EPSS 0.2%Vulnerability Dell #cwe-22	CVE Database V5	2026-07-03
Medium	4.4	EPSS 0.1%	CVE-2026-44268PowerProtect Data Domain · Incorrect Permission Assignment for Critical Resource Medium4.4EPSS 0.1%2026-07-03CVE Database V5CVE-2026-44268 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an incorrect permission Assignment for critical resource vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access. EPSS 0.1%Vulnerability Dell #cwe-732	CVE Database V5	2026-07-03
Medium	4.4	EPSS 0.2%	CVE-2026-44269PowerProtect Data Domain · Link Following Medium4.4EPSS 0.2%2026-07-03CVE Database V5CVE-2026-44269 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper link resolution before file access ('link following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access. EPSS 0.2%Vulnerability Dell #cwe-59	CVE Database V5	2026-07-03
Medium	5.3	EPSS 0.2%	CVE-2026-35159Inspiron 15 3520 · Authentication Bypass by Primary Weakness Medium5.3EPSS 0.2%2026-07-03CVE Database V5CVE-2026-35159 Dell Client Platform BIOS contains an Authentication Bypass by Primary Weakness vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure. EPSS 0.2%Vulnerability Dell #cwe-305	CVE Database V5	2026-07-03
High	7.3	EPSS 0.2%	CVE-2026-41121Device Management Agent · Link Following High7.3EPSS 0.2%2026-07-01CVE Database V5CVE-2026-41121 Dell Device Management Agent, versions prior to DDMA 26.05, contain an Improper Link Resolution Before File Access ('Link Following’) vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. EPSS 0.2%Vulnerability Dell #cwe-59	CVE Database V5	2026-07-01

Showing 381–400 of 739 results