CVE-2026-35073 Dell CVE debrief

Who should care

System administrators and security teams responsible for Dell PowerProtect Data Domain systems, especially those with high-privileged local access, should review and apply patches or updates as available. They should also implement compensating controls such as restricting local access to high-privileged users and monitor systems for suspicious activity indicating potential exploitation. Additionally, they should consider exception tracking for systems unable to be patched immediately. This vulnerability affects Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60, which are used for data protection and management in various IT environments. The vulnerability's impact on business operations could be significant if exploited, making prompt action crucial for maintaining system security and integrity. Security teams should prioritize patching and mitigation efforts based on the vulnerability's severity and potential impact on their specific environments. Regular reviews of system configurations, user access controls, and monitoring for unusual activity are also recommended to help prevent exploitation. Furthermore, maintaining up-to-date inventory of affected systems and regularly verifying version numbers against vendor documentation can help ensure timely remediation of this vulnerability. Collaboration between system administrators and security teams is essential to effectively address this vulnerability and minimize potential risks to the organization. By taking proactive measures, organizations can reduce the likelihood of successful exploitation and protect their critical assets. It is also advisable to consult with Dell support and security advisories for the latest information and guidance on addressing this vulnerability. Overall, a coordinated and informed approach to vulnerability management is necessary to mitigate the risks associated with CVE-2026-35073 effectively. The required actions include verifying affected systems, applying patches, enhancing monitoring, and ensuring that security controls, 7

Technical summary

CVE-2026-35073 is an improper neutralization of special elements used in an OS command injection vulnerability in Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Defensive priority

Medium priority due to local access requirement and high privileges needed for exploitation.

Recommended defensive actions

• Inventory affected Dell PowerProtect Data Domain systems and verify version numbers.
• Apply vendor patches or updates as available.
• Implement compensating controls such as restricting local access to high-privileged users.
• Monitor systems for suspicious activity indicating potential exploitation.
• Consider exception tracking for systems unable to be patched immediately.

Evidence notes

The CVE-2026-35073 record indicates an improper neutralization of special elements used in an OS command injection vulnerability in Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

Official resources