CVE-2026-90721
Low · 3.4CVSS
3.4
EPSS
0.1%
Published
Oct 28, 2026
CISA due date
—
The record
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Path Traversal vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118485 Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding… CWE-24
- CVE-2026-14947 A high-privileged remote attacker can upload malicious ZIP archive containing directory… CWE-24
- CVE-2026-76353 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does… CWE-24
- CVE-2026-73573 In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in… CWE-24
- CVE-2026-48047 XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. CWE-24
- CVE-2026-66140 Exim before 4.99.5 allows directory traversal to access files outside of the spool area… CWE-24
- CVE-2026-44942 A path traversal in handling the "path" component of .repo files processed by libzypp… CWE-24
- CVE-2026-49103 Webmin before 2.640 does not safely construct a filename for saving of an attachment… CWE-24