CVE-2026-49813 Dell CVE debrief

Who should care

Administrators and security teams responsible for Dell PowerProtect Data Domain systems should prioritize patching this vulnerability to prevent potential exploitation. They should review the official advisory for accurate affected scope and severity, and verify the systems' versions to determine if they are affected. Additionally, they should restrict local access to high-privileged users and monitor system logs for suspicious activity.

Technical summary

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70, contain an improper neutralization of special elements used in an OS command ('OS command Injection') vulnerability. This vulnerability allows a high-privileged attacker with local access to potentially exploit the vulnerability, leading to arbitrary command execution. The vulnerability has a CVSS score of 6.7 and a severity of MEDIUM.

Defensive priority

High

Recommended defensive actions

• Apply the latest security patches provided by Dell for PowerProtect Data Domain.
• Restrict local access to high-privileged users.
• Monitor system logs for suspicious activity.
• Implement compensating controls, such as intrusion detection systems.
• Review the official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record was published on 2026-07-03T15:16:32.487Z and was last modified on 2026-07-07T05:16:51.747Z. The NVD entry is currently Undergoing Analysis. Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 are affected. However, detailed information about the vulnerability and its impact is limited, and defenders should verify the official advisory for accurate affected scope and severity.

Official resources