---
id: CVE-2026-94346
title: >-
  PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0
  through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025
  release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0
  through 8.6.…
summary: >-
  PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0
  through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025
  release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0
  through 8.6.…
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-31
vendor: Dell
product: PowerProtect Data Domain Virtual Edition
affected:
  - powerprotect_data_domain_virtual_edition < 8.9.0.0 or later
  - powerprotect_data_domain_virtual_edition < 7.13.1.80 or later
  - powerprotect_data_domain_virtual_edition < 8.3.1.40 or later
  - powerprotect_data_domain_virtual_edition < 8.6.1.20 or later
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-28T14:58:11.355204Z'
published: '2026-10-27'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T03:56:49.680Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-94346'
references:
  - url: >-
      https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
tags:
  - cve.org
epss: 0.00531
epssPercentile: 0.45015
ingestedAt: '2026-10-27T16:11:59.346Z'
---

## Overview

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

## Affected

- `powerprotect_data_domain_virtual_edition < 8.9.0.0 or later`
- `powerprotect_data_domain_virtual_edition < 7.13.1.80 or later`
- `powerprotect_data_domain_virtual_edition < 8.3.1.40 or later`
- `powerprotect_data_domain_virtual_edition < 8.6.1.20 or later`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.