CVE-2026-103780

Summary

A stack-based buffer overflow in Dell PowerProtect Data Domain allows unauthenticated remote attackers to overwrite the stack and achieve command execution by sending a malicious request to a vulnerable service.

Exploitability

Exploitation is straightforward for an unauthenticated attacker with network access to the affected service, as no authentication or user interaction is required.

Blast radius

Successful exploitation could lead to full system compromise, including unauthorized data access, modification, and complete service disruption across the Data Domain appliance.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Dell PowerProtect Data Domain LTS2024 release 7.13.1.81 or later, LTS2025 release 8.3.1.41 or later, LTS2026 release 8.6.1.21 or later, Feature Release 8.9 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.