{"id":"CVE-2026-103780","published":"2026-10-28T11:17:14.113","lastModified":"2026-10-29T04:18:21.977","description":"Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Dell PowerProtect Data Domain allows unauthenticated remote attackers to overwrite the stack and achieve command execution by sending a malicious request to a vulnerable service.","exploitability":"Exploitation is straightforward for an unauthenticated attacker with network access to the affected service, as no authentication or user interaction is required.","blast_radius":"Successful exploitation could lead to full system compromise, including unauthorized data access, modification, and complete service disruption across the Data Domain appliance.","remediation":"Upgrade to Dell PowerProtect Data Domain LTS2024 release 7.13.1.81 or later, LTS2025 release 8.3.1.41 or later, LTS2026 release 8.6.1.21 or later, Feature Release 8.9 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["stack-overflow","rce","unauthenticated","ddos"],"model":"garnet-coder","analyzedAt":"2026-10-29T08:41:29.622Z"}}