---
id: "CVE-2026-86379"
kind: "vulnerability"
aliases: ["CVE-2026-86379"]
title: "Dell PowerProtect Data Domain Management Center: OS command injection allows command execution"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["appliance", "backup", "data-domain", "dell", "infrastructure", "powerprotect"]
not_affected_if: ["admin-access-restricted", "version-outside-listed-ranges"]
published_at: "2026-10-28T10:17:09+00:00"
first_seen_at: "2026-10-28T10:32:15+00:00"
updated_at: "2026-10-28T10:34:27+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86379", "first_seen_at": "2026-10-28T10:32:15+00:00"}]
---

# Dell PowerProtect Data Domain Management Center: OS command injection allows command execution

Several feature and LTS releases of Dell PowerProtect Data Domain Management Center contain an OS command injection flaw, where special characters in input reach a system shell. An attacker with high privileges and remote access can run commands on the appliance.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Management Center version in the appliance UI or CLI, and compare it with the affected ranges: 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, 8.6.1.0 through 8.6.1.20.

## Fix

- Move Dell PowerProtect Data Domain Management Center to a fixed release from Dell's advisory for CVE-2026-86379; the fixed version numbers are unknown from the sources.

## Timeline

- 2026-10-28T10:32:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-86379

## From the sources

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_