CVE-2026-110541
Last modified
CVE-2026-110541 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution..
Description
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Dell | PowerProtect Data Domain | < 8.9.0.0 or later; < 7.13.1.90 or later; < 8.3.1.50 or later; < 8.6.1.30 or later |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-110541?
How severe is CVE-2026-110541?
How do I fix CVE-2026-110541?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-110530The FeedWordPress plugin for WordPress is vulnerable to Stor…7.2
- CVE-2026-110533The FV Flowplayer Video Player plugin for WordPress is vulne…6.4
- CVE-2026-110536A vulnerability was determined in D-Link DIR-868L 2.01b05. T…10
- CVE-2026-110537The Essential Addons for Elementor WordPress plugin before …3.8
- CVE-2026-11054Use after free in WebRTC in Google Chrome prior to 149.0.782…8.8
- CVE-2026-110540Dell PowerProtect Data Domain Management Center, Feature Rel…7.1
- CVE-2026-11055Use after free in ANGLE in Google Chrome on Windows prior to…8.8
- CVE-2026-11056Insufficient validation of untrusted input in SiteIsolation …9.6
- CVE-2026-11057Uninitialized Use in Skia in Google Chrome prior to 149.0.78…6.5
- CVE-2026-11058Integer overflow in CredentialProvider in Google Chrome on W…7.5
- CVE-2026-11059Use after free in Blink in Google Chrome prior to 149.0.7827…8.8
- CVE-2026-110590The Klarna for WooCommerce plugin for WordPress is vulnerabl…7.5
Are you affected by CVE-2026-110541?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST