CVE-2026-46463
published 2026-07-03CVE-2026-46463: Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through…
PriorityP339medium6.5CVSS 3.1
AVNACHPRNUINSUCNILAH
EPSS
0.24%
15.4th percentile
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dell | data_domain_operating_system | 7.7.1.0 – 7.13.1.70 | — |
| dell | data_domain_operating_system | 8.0.0.0 – 8.3.1.30 | — |
| dell | data_domain_operating_system | 8.4.0.0 – 8.7.0.0 | — |
| dell | powerprotect_data_domain | < 8.8.0.0 or later | 8.8.0.0 or later |
| dell | powerprotect_data_domain | < 8.6.1.20 or later | 8.6.1.20 or later |
| dell | powerprotect_data_domain | < 8.3.1.40 or later | 8.3.1.40 or later |
| dell | powerprotect_data_domain | < 7.13.1.80 or later | 7.13.1.80 or later |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 throu
ghsa_unreviewed·2026-07-03
CVE-2026-46463 [MEDIUM] CWE-190 Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 throu
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
VulDB
Dell PowerProtect Data Domain up to 8.7 integer overflow (dsa-2026-278)
vuldb·2026-07-03·CVSS 6.5
CVE-2026-46463 [MEDIUM] Dell PowerProtect Data Domain up to 8.7 integer overflow (dsa-2026-278)
A vulnerability described as critical has been identified in Dell PowerProtect Data Domain up to 8.7. Affected is an unknown function. The manipulation results in integer overflow.
This vulnerability is reported as CVE-2026-46463. The attack can be launched remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-03
Published