CVE-2026-94347
Awaiting Analysis Awaiting Analysis - Queue

Process Control Bypass in PowerProtect Data Domain Virtual Edition

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: Dell

Description
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-94347
EUVD
EUVD-2026-110857

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-114 Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Process Control vulnerability in PowerProtect Data Domain Virtual Edition versions 7.7.1.0 through 8.7, LTS2024 versions 7.13.1.0 through 7.13.1.70, LTS2025 versions 8.3.1.0 through 8.3.1.30, and LTS2026 versions 8.6.1.0 through 8.6.1.10. A high privileged remote attacker could exploit it to bypass protection mechanisms.

Impact Analysis

A successful exploit could allow an attacker to bypass security controls, potentially gaining unauthorized access to sensitive data or disrupting operations in systems running affected versions of PowerProtect Data Domain Virtual Edition.

Compliance Impact

This vulnerability could lead to unauthorized data access or breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations that mandate strict data protection and access controls.

Mitigation Strategies

Apply the latest security patches or updates provided by Dell for PowerProtect Data Domain Virtual Edition. Ensure high privileged accounts are secured with strong authentication and limit remote access to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-94347. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart