CVE-2026-46730
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dell | PowerProtect Data Domain | < 8.8.0.0 or later | affected |
< 8.6.1.20 or later | affected | ||
< 8.3.1.40 or later | affected | ||
< 7.13.1.80 or later | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-46730
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an incorrect authorization vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized command execution.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不正确
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | PowerProtect Data Domain | 0 ~ 8.8.0.0 or later | - |
II. Public POCs for CVE-2026-46730
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-46730
请登录查看更多情报信息。
Same Patch Batch · Dell · 2026-07-03 · 19 CVEs total
| CVE-2026-49814 | 7.2 HIGH | Dell PowerProtect Data Domain OS命令注入漏洞 |
| CVE-2026-49815 | 7.2 HIGH | Dell PowerProtect数据泄露漏洞：命令注入 |
| CVE-2026-53478 | 7.2 HIGH | PowerProtect DD 命令注入漏洞 |
| CVE-2026-49813 | 6.7 MEDIUM | Dell PowerProtect Data Domain 命令注入漏洞 |
| CVE-2026-54483 | 6.7 MEDIUM | Dell PowerProtect数据域命令注入漏洞 |
| CVE-2026-46463 | 6.5 MEDIUM | Dell PowerProtect Data Domain整数溢出致拒绝服务 |
| CVE-2026-26355 | 6.5 MEDIUM | Dell PowerProtect数据域命令注入漏洞 |
| CVE-2026-46467 | 5.8 MEDIUM | Dell PowerProtect 7.7.1-8.7日志敏感信息注入漏洞 |
| CVE-2026-46465 | 5.5 MEDIUM | Dell PowerProtect Data Domain格式字符串漏洞导致信息泄露 |
| CVE-2026-35159 | 5.3 MEDIUM | Dell Client Platform BIOS 认证绕过致信息泄露 |
| CVE-2026-46464 | 4.9 MEDIUM | Dell Data Domain 多个版本存在链接跟随信息泄露漏洞 |
| CVE-2026-46468 | 4.4 MEDIUM | Dell PowerProtect Data Domain Link Following漏洞 |
| CVE-2026-44268 | 4.4 MEDIUM | Dell PowerProtect Data Domain权限分配错误漏洞 |
| CVE-2026-44269 | 4.4 MEDIUM | Dell PowerProtect Data Domain越权链接解析漏洞 |
| CVE-2026-41123 | 4.3 MEDIUM | Dell PowerProtect Data Domain权限控制漏洞 |
| CVE-2026-56085 | 3.3 LOW | Dell PowerProtect 未初始化资源漏洞致信息泄露 |
| CVE-2026-46466 | 2.7 LOW | Dell PowerProtect Data Domain 信息篡改漏洞 |
| CVE-2026-41124 | 2.3 LOW | Dell PowerProtect 数据目录穿越漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-863
- CVE-2026-28744
Gitea Git smart HTTP bypasses repository token scopes for be - CVE-2026-27780
Gitea pre-receive hook can miss branch-protection checks aft - CVE-2026-27775
Gitea pre-receive hook permission cache allows full reposito - CVE-2026-27761
Gitea repository feeds bypass API token scope enforcement - CVE-2026-26231
Gitea maintainer-edit permissions allow unauthorized commits
V. Comments for CVE-2026-46730
No comments yet