# Dell Data Domain Operating System


- [CVE-2026-53481](https://insights.sbomify.com/CVE-2026-53481/): Path traversal in PowerProtect Data Domain (critical 9.8)
- [CVE-2026-53483](https://insights.sbomify.com/CVE-2026-53483/): Auth bypass in PowerProtect Data Domain (critical 9.8)
- [CVE-2025-36594](https://insights.sbomify.com/CVE-2025-36594/): Auth bypass in PowerProtect Data Domain Feature Release (critical 9.8)
- [CVE-2026-56086](https://insights.sbomify.com/CVE-2026-56086/): Missing authorization in PowerProtect Data Domain (high 8.8)
- [CVE-2026-26944](https://insights.sbomify.com/CVE-2026-26944/): Missing authorization in PowerProtect Data Domain (high 8.8)
- [CVE-2025-29987](https://insights.sbomify.com/CVE-2025-29987/): Privilege escalation in DD OS 7.10 (high 8.8)
- [CVE-2024-29176](https://insights.sbomify.com/CVE-2024-29176/): Memory corruption in PowerProtect DD (high 8.8)
- [CVE-2024-37140](https://insights.sbomify.com/CVE-2024-37140/): Command injection in PowerProtect DD (high 8.8)
- [CVE-2026-23853](https://insights.sbomify.com/CVE-2026-23853/): Hardcoded credentials in PowerProtect Data Domain (high 8.4)
- [CVE-2026-26354](https://insights.sbomify.com/CVE-2026-26354/): Memory corruption in PowerProtect Data Domain (high 8.1)
- [CVE-2025-36568](https://insights.sbomify.com/CVE-2025-36568/): Hardcoded credentials in PowerProtect Data Domain BoostFS (high 7.8)
- [CVE-2025-30099](https://insights.sbomify.com/CVE-2025-30099/): Command injection in PowerProtect Data Domain Feature Release (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/dell/data-domain-operating-system/