CVE-2026-41124 - Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability

Back Back to CVE browser

MEDIUM

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability

Published Jul 3, 2026

4.4

MEDIUM

CVSS 3.1

EPSS 0.17%

Description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Affected products

Vendor Dell Product PowerProtect Data Domain Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <7.13.1.80 or later
- Version
  0
  Status
  affected
  Constraints
  <8.3.1.40 or later
- Version
  0
  Status
  affected
  Constraints
  <8.6.1.20 or later
- Version
  0
  Status
  affected
  Constraints
  <8.8.0.0 or later

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

PowerProtect Data Domain

unaffected

Version	Status	Constraints
0	affected	<7.13.1.80 or later
0	affected	<8.3.1.40 or later
0	affected	<8.6.1.20 or later
0	affected	<8.8.0.0 or later

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41534
Advisory
https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41534		Advisory
https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities		vendor-advisoryVendor Advisory