Back to overview

CVE-2026-41124

LOW
2.3
CVSS 3.1
Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Metadata

CVE ID
CVE-2026-41124
State
PUBLISHED
Assigner
dell
Reserved
2026-04-17 05:04 UTC
Published
2026-07-03 12:19 UTC
Last updated
2026-07-03 12:19 UTC
Primary CWE
CWE-22
CWE-22: Improper Limitation of a Pathname to a Restricted Di…
Vendor / Product
Dell / PowerProtect Data Domain
Sources
cve.org  ·  NVD

Severity & Metrics

2.3 LOW CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Affected products (1)
VendorProductPlatformVersions
Dell PowerProtect Data Domain — 0 < 8.8.0.0 or later, 0 < 8.6.1.20 or later, 0 < 8.3.1.40 or later, 0 < 7.13.1.80 or later
Weakness (CWE)
CWESourceDescription
CWE-22 cna CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSS scores (1)
ScoreSeverityVersionSourceVector
2.3 LOW 3.1 cna CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
References (1)
Back to overview