CVEvulnerability

CVE-2026-94346

7.2 HIGH Published 2026-10-27 Modified 2026-10-29 Official page ↗
Status
Undergoing Analysis
Published
2026-10-27
Last modified
2026-10-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-31

Description

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Related

Weakness · CWE (1)

  • CWE-31 Path Traversal: 'dir\..\..\filename' weakness

References