Live › vulnerability › CVE-2026-68866
Go to dashboardDell PowerProtect Data Domain appliances contain a relative path traversal flaw in the certificate handling code. A highly privileged remote attacker could exploit it to cause a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Organizations running Dell PowerProtect Data Domain appliances on the listed DD OS release ranges with remote administrative access enabled. Only highly privileged accounts can exploit it, so systems with tightly restricted administrator access carry less practical risk. Appliances on other versions are not affected according to the sources.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-68866")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.