PatchSiren cyber security CVE debrief

CVE-2026-53481 Dell CVE debrief

CVE-2026-53481 is a critical severity Path Traversal vulnerability in Dell PowerProtect Data Domain. An unauthenticated attacker with remote access could exploit this vulnerability, leading to unauthorized access to the system. The vulnerability affects Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, and LTS2024 release versions 7.13.1.0 through 7.13.1.70. This vulnerability allows an attacker to take complete control of the system.

Vendor: Dell
Product: PowerProtect Data Domain
CVSS: CRITICAL 9.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-07-07
Original CVE updated: 2026-07-08
Advisory published: 2026-07-07
Advisory updated: 2026-07-08

Who should care

Organizations using Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, and LTS2024 release versions 7.13.1.0 through 7.13.1.70 should prioritize patching. IT teams responsible for Dell PowerProtect Data Domain deployments should review and apply the latest security patches.

Technical summary

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to the system. The vulnerability can be exploited by manipulating pathnames to access restricted directories.

Defensive priority

High

Recommended defensive actions

Apply the latest security patches provided by Dell
Restrict remote access to the system
Monitor system logs for suspicious activity
Implement additional security controls, such as multi-factor authentication
Review compensating controls for exposed systems while remediation is scheduled and verified
Check relevant monitoring, detection, and logs for exposed assets that need extra review
Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-07-07T13:16:31.397Z and has not been modified since then. The NVD entry is currently Undergoing Analysis. Dell PowerProtect Data Domain versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 are affected. Defenders should verify system configurations and review logs for suspicious activity.

Sources and references

Verified primary and authoritative sources

CVE-2026-53481 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-53481

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-53481 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-53481

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities

[email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.