CVE-2026-46465

Katalog CVE

CVSS 5.5 · Medium EPSS 0,41%

Kerentanan Use of Externally-Controlled Format String pada dell data domain operating system. Skor CVSS 3.1 5.5 (Medium) menurut emc.com.

Deskripsi (NVD)

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of externally-controlled format string vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and denial of service.

Rincian

Terbit di NVD

3 Juli 2026

Terakhir diubah

8 Juli 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber emc.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-134: Use of Externally-Controlled Format String

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerprotect-data-dom... advisory vendor