CVE Watch29 de out. de 2026

CVE-2026-94347

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,

CVSS

7.2

Alta

EPSS

0.3%

p22

KEV

—

Exploit Today

0-100

Publicado: 27 de out. de 2026 · Última mod.: 29 de out. de 2026 · CWE-114

EPSS · 30d

0.3%EPSS · 30 dias0.3%

2026-10-282026-11-07

Descrição técnica

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Process Control vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Referências oficiais

www.dell.comhttps://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-362519.6 CRÍ

45.8%

——14IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56347.21d CVE-2025-3625010.0 CRÍ

52.4%

——16IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in CVE-2024-56346.21d CVE-2025-463703.3 BAI

1.6%

——0Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.21d