CVE-2026-90727
Low · 3.8CVSS
3.8
EPSS
0.3%
Published
Oct 27, 2026
CISA due date
—
The record
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Relative Path Traversal vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-61725 sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. CWE-23
- CVE-2026-119553 Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through… CWE-23
- CVE-2026-107239 A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to… CWE-23
- CVE-2026-68866 PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release… CWE-23
- CVE-2026-115812 Relative path traversal during model archive extraction in Amazon Web Services Multi… CWE-23
- CVE-2026-114714 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal… CWE-23
- CVE-2026-83923 Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute… CWE-23
- CVE-2026-70222 Relative path traversal in Windows Shell allows an authorized attacker to elevate… CWE-23