CVE-2026-46468
Received Received - Intake

Improper Link Resolution in Dell PowerProtect Data Domain

Publication date: 2026-07-03

Last updated on: 2026-07-03

Assigner: Dell

Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper link resolution before file access ('Link following') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-03
Last Modified
2026-07-03
Generated
2026-07-03
AI Q&A
2026-07-03
EPSS Evaluated
N/A
NVD
CVE-2026-46468
EUVD
EUVD-2026-41542

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
dell powerprotect_data_domain From 7.7.1.0 (inc) to 8.7 (inc)
dell powerprotect_data_domain From 8.6.1.0 (inc) to 8.6.1.10 (inc)
dell powerprotect_data_domain From 8.3.1.0 (inc) to 8.3.1.30 (inc)
dell powerprotect_data_domain From 7.13.1.0 (inc) to 7.13.1.70 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and certain LTS releases. It is an improper link resolution before file access issue, also known as a 'Link following' vulnerability. Essentially, a high privileged attacker with local access could exploit this flaw to gain unauthorized access to information.

Impact Analysis

The impact of this vulnerability is information exposure. A high privileged attacker with local access could exploit the improper link resolution to access sensitive information that they should not be able to see.

Compliance Impact

The vulnerability in Dell PowerProtect Data Domain allows a high privileged attacker with local access to potentially expose information due to improper link resolution before file access.

Such information exposure could impact compliance with common standards and regulations like GDPR and HIPAA, which require protection of sensitive data and prevention of unauthorized access or disclosure.

However, specific details on how this vulnerability directly affects compliance with these standards are not provided.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-46468. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart