{"id":"CVE-2026-110541","kind":"vulnerability","aliases":["CVE-2026-110541"],"related":[],"title":"Dell PowerProtect Data Domain: OS command injection lets a privileged user run commands","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution.","summary":"Several Dell PowerProtect Data Domain feature and LTS release lines contain an OS command injection flaw. A high-privileged remote attacker can exploit it to execute commands on the appliance.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["backup-appliance","data-domain","dell","infrastructure","powerprotect"],"not_affected_if":["version-outside-affected-ranges"],"how_to_check":"- Check the installed Data Domain OS version against the affected ranges in the Dell advisory (feature releases 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20)","fix":"- Move Data Domain OS to a release outside the affected ranges, as listed in the Dell security advisory (fixed versions unknown from these sources)","status":"open","published_at":"2026-10-28T11:17:14+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","triaged_at":"2026-10-28T11:33:24+00:00","updated_at":"2026-10-28T11:33:24+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-28T11:33:24Z","model":"claude-haiku-5-5","output":{"fix":"- Move Data Domain OS to a release outside the affected ranges, as listed in the Dell security advisory (fixed versions unknown from these sources)","reach":"network","title":"Dell PowerProtect Data Domain: OS command injection lets a privileged user run commands","impact":"high","summary":"Several Dell PowerProtect Data Domain feature and LTS release lines contain an OS command injection flaw. A high-privileged remote attacker can exploit it to execute commands on the appliance.","category":"infrastructure","nicknames":[],"who_cares":["dell","powerprotect","data-domain","backup-appliance"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker with high privileges runs arbitrary OS commands on the appliance.","analyst_note":"Find the Dell security advisory for this CVE to confirm fixed versions and any required privilege level or configuration.","how_to_check":"- Check the installed Data Domain OS version against the affected ranges in the Dell advisory (feature releases 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, LTS2026 8.6.1.0 through 8.6.1.20)","needs_analyst":true,"not_affected_if":["version-outside-affected-ranges"],"who_is_affected":"Teams running Dell PowerProtect Data Domain appliances on the listed feature or LTS release versions. The attacker must already hold high privileges and have remote access, so appliances with tightly controlled administrative access carry less exposure, but the sources do not describe further conditions.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000646,"input_tokens":3428,"output_tokens":606,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-110541':16A,19A '-2026':15A,18A '7.13.1.0':73C '7.13.1.80':75C '7.7.1.0':67C '8.3.1.0':79C '8.3.1.40':81C '8.6.1.0':85C '8.6.1.20':87C '8.8':69C 'access':110C 'applianc':22B,59B 'attack':50B,107C 'backup':21B 'backup-appli':20B 'command':6A,13A,42B,56B,99C,101C,118C 'contain':39B,88C 'could':111C 'cve':14A,17A 'data':3A,24B,32B,62C 'data-domain':23B 'dell':1A,26B,30B,60C 'domain':4A,25B,33B,63C 'element':94C 'execut':55B,119C 'exploit':52B,113C 'featur':34B,64C 'flaw':44B 'high':47B,105C 'high-privileg':46B 'improp':90C 'infrastructur':27B 'inject':7A,43B,102C 'lead':116C 'let':8A 'line':38B 'lts':36B 'lts2024':70C 'lts2025':76C 'lts2026':82C 'neutral':91C 'os':5A,41B,98C,100C 'potenti':112C 'powerprotect':2A,28B,31B,61C 'privileg':10A,48B,106C 'releas':37B,65C,71C,77C,83C 'remot':49B,109C 'run':12A 'sever':29B 'special':93C 'use':95C 'user':11A 'version':66C,72C,78C,84C 'vulner':103C,115C","nicknames":[],"mitigations":[],"who_affected":"Teams running Dell PowerProtect Data Domain appliances on the listed feature or LTS release versions. The attacker must already hold high privileges and have remote access, so appliances with tightly controlled administrative access carry less exposure, but the sources do not describe further conditions.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T11:17:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110541","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110541","severity":null,"published_at":"2026-10-28T11:17:14+00:00","modified_at":"2026-10-28T11:17:14+00:00","first_seen_at":"2026-10-28T11:32:27+00:00","fetched_at":"2026-10-28T11:32:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}