---
id: "CVE-2026-103780"
kind: "vulnerability"
aliases: ["CVE-2026-103780"]
title: "Dell PowerProtect Data Domain: stack buffer overflow allows unauthenticated remote command execution"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["backup-appliance", "data-domain", "dell", "infrastructure", "powerprotect"]
not_affected_if: ["no-remote-access", "version-outside-affected-ranges"]
published_at: "2026-10-28T11:17:14+00:00"
first_seen_at: "2026-10-28T11:32:27+00:00"
updated_at: "2026-10-28T11:33:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103780", "first_seen_at": "2026-10-28T11:32:27+00:00"}]
---

# Dell PowerProtect Data Domain: stack buffer overflow allows unauthenticated remote command execution

Several Dell PowerProtect Data Domain release lines contain a stack-based buffer overflow. An unauthenticated attacker with remote access could potentially run commands on the appliance.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Data Domain OS version against the affected ranges: Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20
- Confirm whether the appliance management interface is reachable from untrusted networks (unknown from the sources)

## Fix

- Move Data Domain OS to a fixed release listed in Dell's advisory for your release line (unknown from the sources)
- Restrict management and remote access to trusted networks until patched

## Timeline

- 2026-10-28T11:32:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103780

## From the sources

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_