CVE-2026-94346
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
PowerProtect Data Domain Virtual Edition in Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10 contains a Path Traversal vulnerability. A high-privileged attacker with remote access could exploit it to achieve command execution.
Risk Assessment
Command execution by a privileged attacker can lead to full compromise of the backup appliance and its data. This may result in data loss or modification and further lateral movement in the network.
Recommendation
Immediately install the vendor updates for the release train in use. Restrict remote administrative access and audit high-privilege accounts.
Other vulnerabilities in PowerProtect Data Domain Virtual Edition
Original NVD description (English source)
PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS