CVE-2026-53481
Undergoing Analysis Undergoing Analysis - In Progress

Path Traversal in Dell PowerProtect Data Domain

Publication date: 2026-07-07

Last updated on: 2026-07-07

Assigner: Dell

Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to the system. This is a critical severity vulnerability as it allows an attacker to take complete control of system; so Dell recommends customers to upgrade at the earliest opportunity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-07
Last Modified
2026-07-07
Generated
2026-07-07
AI Q&A
2026-07-07
EPSS Evaluated
N/A
NVD
CVE-2026-53481
EUVD
EUVD-2026-42038

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
dell powerprotect_data_domain From 7.7.1.0 (inc) to 8.7 (inc)
dell powerprotect_data_domain From 8.6.1.0 (inc) to 8.6.1.10 (inc)
dell powerprotect_data_domain From 8.3.1.0 (inc) to 8.3.1.30 (inc)
dell powerprotect_data_domain From 7.13.1.0 (inc) to 7.13.1.70 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a 'Path Traversal' issue found in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7 and certain LTS releases. It involves improper limitation of a pathname to a restricted directory, which means an attacker can manipulate file paths to access files and directories outside the intended restricted area.

An unauthenticated attacker with remote access could exploit this vulnerability to gain unauthorized access to the system.

Because of this, the vulnerability is considered critical, as it allows an attacker to potentially take complete control of the affected system.

Impact Analysis

Exploitation of this vulnerability can lead to unauthorized access and complete control over the affected system by an attacker.

This means sensitive data could be accessed, modified, or deleted, and the system could be used to launch further attacks or disrupt operations.

Because the attacker does not require authentication and can exploit the vulnerability remotely, the risk and potential impact are very high.

Mitigation Strategies

Dell recommends customers to upgrade to a fixed version at the earliest opportunity to mitigate this critical vulnerability.

Compliance Impact

The vulnerability allows an unauthenticated attacker to gain unauthorized access and potentially take complete control of the system. Such unauthorized access to sensitive data or systems can lead to violations of data protection regulations and standards like GDPR and HIPAA, which require strict controls to protect personal and health information.

Because this vulnerability compromises confidentiality, integrity, and availability of the system, it poses a significant risk to compliance with these regulations, which mandate safeguarding sensitive data against unauthorized access and breaches.

Dell recommends upgrading at the earliest opportunity to mitigate this critical severity vulnerability and reduce compliance risks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53481. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart