CVE-2026-46730 Dell CVE debrief

Who should care

System administrators and security teams responsible for Dell PowerProtect Data Domain systems, especially those with high-privileged local access, should be aware of this vulnerability and take necessary defensive actions.

Technical summary

The vulnerability exists in Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70. It allows a high privileged attacker with local access to potentially exploit the vulnerability, leading to unauthorized command execution. The CVSS score is 4.2, with a severity rating of MEDIUM.

Defensive priority

Medium priority due to the local access requirement and potential for unauthorized command execution.

Recommended defensive actions

• Inventory and assess Dell PowerProtect Data Domain systems for version 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.3
• Apply vendor-provided patches or updates as soon as available
• Monitor system logs for suspicious activity
• Implement compensating controls such as restricting local access to high-privileged users
• Consider exception tracking for systems that cannot be immediately patched

Evidence notes

The CVE record was published on 2026-07-03T13:17:23.390Z and was last modified on 2026-07-07T05:16:51.520Z. The NVD entry is currently Undergoing Analysis. Dell has provided a security update for this vulnerability.

Official resources