CVE-2026-41122 Dell CVE debrief

Who should care

Security teams and administrators responsible for Dell PowerProtect Data Domain systems should be aware of this vulnerability and take immediate action to mitigate the risk. This includes reviewing system deployments, applying vendor-provided patches or updates, and implementing compensating controls. The vulnerability's impact could lead to significant information disclosure, session theft, or client-side request forgery if exploited.

Technical summary

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70, contain a stored cross-site scripting vulnerability. The vulnerability is exploitable by an unauthenticated attacker with remote access, potentially leading to information disclosure, session theft, or client-side request forgery. The vulnerability is caused by improper input validation, allowing an attacker to inject malicious scripts into the application.

Defensive priority

High priority due to the potential for significant impact and the ease of exploitation.

Recommended defensive actions

• Apply vendor-provided patches or updates to vulnerable systems
• Implement compensating controls, such as web application firewalls or intrusion detection systems
• Monitor systems for suspicious activity and implement exception tracking
• Conduct inventory checks to identify vulnerable systems
• Verify vendor remediation and testing
• Review system logs for potential exploitation attempts
• Isolate affected systems from the network if patches are not immediately available

Evidence notes

The CVE record was published on 2026-07-08T14:16:58.197Z and was last modified on 2026-07-08T20:09:50.337Z. The NVD entry is currently Analyzed. This vulnerability affects Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, and LTS2024 release versions 7.13.1.0 through 7.13.1.70. The vulnerability is exploitable by an unauthenticated attacker with remote access, potentially leading to information disclosure, session theft, or client-side request forgery. The evidence is based on the official CVE record and NVD entry.

Official resources