CVE-2026-46463
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dell | PowerProtect Data Domain | < 8.8.0.0 or later | affected |
< 8.6.1.20 or later | affected | ||
< 8.3.1.40 or later | affected | ||
< 7.13.1.80 or later | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-46463
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
整数溢出或超界折返
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | PowerProtect Data Domain | 0 ~ 8.8.0.0 or later | - |
II. Public POCs for CVE-2026-46463
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-46463
请登录查看更多情报信息。
Same Patch Batch · Dell · 2026-07-03 · 19 CVEs total
| CVE-2026-49814 | 7.2 HIGH | Dell PowerProtect Data Domain OS命令注入漏洞 |
| CVE-2026-49815 | 7.2 HIGH | Dell PowerProtect数据泄露漏洞：命令注入 |
| CVE-2026-53478 | 7.2 HIGH | PowerProtect DD 命令注入漏洞 |
| CVE-2026-49813 | 6.7 MEDIUM | Dell PowerProtect Data Domain 命令注入漏洞 |
| CVE-2026-54483 | 6.7 MEDIUM | Dell PowerProtect数据域命令注入漏洞 |
| CVE-2026-26355 | 6.5 MEDIUM | Dell PowerProtect数据域命令注入漏洞 |
| CVE-2026-46467 | 5.8 MEDIUM | Dell PowerProtect 7.7.1-8.7日志敏感信息注入漏洞 |
| CVE-2026-46465 | 5.5 MEDIUM | Dell PowerProtect Data Domain格式字符串漏洞导致信息泄露 |
| CVE-2026-35159 | 5.3 MEDIUM | Dell Client Platform BIOS 认证绕过致信息泄露 |
| CVE-2026-46464 | 4.9 MEDIUM | Dell Data Domain 多个版本存在链接跟随信息泄露漏洞 |
| CVE-2026-46468 | 4.4 MEDIUM | Dell PowerProtect Data Domain Link Following漏洞 |
| CVE-2026-44268 | 4.4 MEDIUM | Dell PowerProtect Data Domain权限分配错误漏洞 |
| CVE-2026-44269 | 4.4 MEDIUM | Dell PowerProtect Data Domain越权链接解析漏洞 |
| CVE-2026-41123 | 4.3 MEDIUM | Dell PowerProtect Data Domain权限控制漏洞 |
| CVE-2026-46730 | 4.2 MEDIUM | Dell PowerProtect Data Domain 错误授权漏洞 |
| CVE-2026-56085 | 3.3 LOW | Dell PowerProtect 未初始化资源漏洞致信息泄露 |
| CVE-2026-46466 | 2.7 LOW | Dell PowerProtect Data Domain 信息篡改漏洞 |
| CVE-2026-41124 | 2.3 LOW | Dell PowerProtect 数据目录穿越漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-190
- CVE-2026-59879
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS - CVE-2026-53482
Dell PowerProtect 整数溢出致拒绝服务 - CVE-2026-58472
GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Enco - CVE-2026-58470
GNU Wget 1.25.0 Integer Overflow via Content-Range Header Pa - CVE-2026-58384
Gimp: gimp: integer overflow in read_rle_channel()
V. Comments for CVE-2026-46463
No comments yet