Back to overview

CVE-2026-46468

MEDIUM
4.4
CVSS 3.1
Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper link resolution before file access ('Link following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Metadata

CVE ID
CVE-2026-46468
State
PUBLISHED
Assigner
dell
Reserved
2026-05-14 17:05 UTC
Published
2026-07-03 12:58 UTC
Last updated
2026-07-03 12:58 UTC
Primary CWE
CWE-59
CWE-59: Improper Link Resolution Before File Access ('Link F…
Vendor / Product
Dell / PowerProtect Data Domain
Sources
cve.org  ·  NVD

Severity & Metrics

4.4 MEDIUM CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products (1)
VendorProductPlatformVersions
Dell PowerProtect Data Domain — 0 < 8.8.0.0 or later, 0 < 8.6.1.20 or later, 0 < 8.3.1.40 or later, 0 < 7.13.1.80 or later
Weakness (CWE)
CWESourceDescription
CWE-59 cna CWE-59: Improper Link Resolution Before File Access ('Link Following')
CVSS scores (1)
ScoreSeverityVersionSourceVector
4.4 MEDIUM 3.1 cna CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
References (1)
Back to overview