---
id: "CVE-2026-94347"
kind: "vulnerability"
aliases: ["CVE-2026-94347"]
title: "Dell PowerProtect Data Domain Virtual Edition: privileged user can bypass protection mechanisms"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["backup", "data-domain", "dell", "powerprotect", "vendor", "virtual-appliance"]
not_affected_if: ["no-remote-privileged-access", "version-outside-listed-ranges"]
published_at: "2026-10-27T14:17:05+00:00"
first_seen_at: "2026-10-27T14:32:26+00:00"
updated_at: "2026-10-27T14:32:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94347", "first_seen_at": "2026-10-27T14:32:26+00:00"}]
---

# Dell PowerProtect Data Domain Virtual Edition: privileged user can bypass protection mechanisms

Dell PowerProtect Data Domain Virtual Edition has a process control flaw in several release lines. A high-privileged attacker with remote access can bypass a protection mechanism.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Data Domain Virtual Edition version against the affected ranges listed in the NVD entry (7.7.1.0 through 8.7, 7.13.1.0 through 7.13.1.70, 8.3.1.0 through 8.3.1.30, 8.6.1.0 through 8.6.1.10)
- Confirm the exact fixed versions with the vendor advisory; the sources do not name them

## Fix

- Move Data Domain Virtual Edition to a fixed release from Dell's advisory for this CVE; the sources do not name the fixed versions
- Limit remote administrative access to the appliance until patched

## Timeline

- 2026-10-27T14:32:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-94347

## From the sources

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_