CVE-2026-53481

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to the system. This is a critical severity vulnerability as it allows an attacker to take complete control of system; so Dell recommends customers to upgrade at the earliest opportunity.

• CWE-22

• https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilitiesVendor Advisory

Published

Jul 7, 2026

Last Modified

Jul 8, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53475A flaw was found in assisted-migration-agent. The applicatio…7.4
• CVE-2026-53476A flaw was found in assisted-migration-agent. An unauthentic…9.6
• CVE-2026-53478Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…7.2
• CVE-2026-53479Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…7.2
• CVE-2026-5348The Academy LMS – WordPress LMS Plugin for Complete eLearnin…5.3
• CVE-2026-53480Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…2.7
• CVE-2026-53482Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…7.5
• CVE-2026-53483Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…9.8
• CVE-2026-53486The decompress package for Node.js extracts archives. Prior …9.1
• CVE-2026-53488containerd is an open-source container runtime. In versions …8.8
• CVE-2026-53489containerd is an open-source container runtime. Versions pri…6.5
• CVE-2026-5349A vulnerability was identified in Trendnet TEW-657BRM 1.00.1…8.8