CVE-2026-103780: Dell PowerProtect Data Domain, Feature Release
- Severity
- 9.8 (CRITICAL)
- Vendor
- DELL
- Affected versions
- Through 8.8
- Patch status
- Unknown
- Published
- 2026-10-28T11:17:14.113
- Modified
- 2026-10-28T11:17:14.113
Why it matters
This matters because the affected product may be exploitable without valid credentials. Internet-facing deployments should be reviewed first.
Recommended admin actions
- Prioritize validation immediately due to critical CVSS severity.
- Compare installed versions against the affected version range in the advisory.
- Treat internet-facing systems as higher priority.
Technical summary
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.
View the official NVD record for CVE-2026-103780
CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.
VULNERABILITY PULSE
809 RECORDS
SECURE FEED ACTIVE
| AFFECTED PRODUCT | ACTION | ||
|---|---|---|---|
| CVE-2026-65145 |
NVIDIA NeMo Agent Toolkit
Reporter: PSIRT
|
10
CRITICAL
|
VIEW RECORD |
| CVE-2026-105781 |
ADOBE
Reporter: PSIRT
|
10
CRITICAL
|
VIEW RECORD |
| CVE-2026-104351 |
ADOBE
Reporter: PSIRT
|
9.9
CRITICAL
|
VIEW RECORD |
| CVE-2026-104353 |
ADOBE
Reporter: PSIRT
|
9.9
CRITICAL
|
VIEW RECORD |
| CVE-2026-105489 |
ADOBE
Reporter: PSIRT
|
9.9
CRITICAL
|
VIEW RECORD |
| CVE-2026-105780 |
ADOBE
Reporter: PSIRT
|
9.9
CRITICAL
|
VIEW RECORD |
| CVE-2026-116692 |
mlflow PATCH
Reporter: SECURITY-ADVISORIES
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-110879 |
jackson-databind PATCH
Reporter: 36C7BE3B-2937-45DF-85EA-CA7133EA542C
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-106013 |
Jupiter X Core
Reporter: SECURITY
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-84999 |
Pie Register Premium
Reporter: SECURITY
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-109218 |
Contact Manager
Reporter: SECURITY
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-86397 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-86400 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-86384 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-103780 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
9.8
CRITICAL
|
VIEW RECORD |
| CVE-2026-116863 |
Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite
Reporter: AUDIT
|
9.6
CRITICAL
|
VIEW RECORD |
| CVE-2026-48360 |
ADOBE
Reporter: PSIRT
|
9.6
CRITICAL
|
VIEW RECORD |
| CVE-2026-103792 |
Dell PowerProtect Data Domain Management Center, Feature Release
Reporter: SECURITY_ALERT
|
9.6
CRITICAL
|
VIEW RECORD |
| CVE-2026-103799 |
Dell PowerProtect Data Domain Management Center, Feature Release
Reporter: SECURITY_ALERT
|
9.6
CRITICAL
|
VIEW RECORD |
| CVE-2026-103594 |
Fireware OS
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
9.5
CRITICAL
|
VIEW RECORD |
| CVE-2026-90465 |
Fireware OS
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
9.4
CRITICAL
|
VIEW RECORD |
| CVE-2026-104383 |
Product identification pending
Reporter: MANDIANT-CVE
|
9.4
CRITICAL
|
VIEW RECORD |
| CVE-2026-112197 |
NoviGest Desktop App
Reporter: CVE-COORDINATION
|
9.4
CRITICAL
|
VIEW RECORD |
| CVE-2026-117564 |
nest-admin PATCH
Reporter: DISCLOSURE
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-117601 |
Electrum PATCH
Reporter: DISCLOSURE
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-117603 |
Electrum PATCH
Reporter: DISCLOSURE
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-104350 |
ADOBE
Reporter: PSIRT
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-114595 |
DHS
Reporter: ICS-CERT
|
9.3
CRITICAL
|
VIEW RECORD |
| CVE-2026-112709 |
Fireware OS
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
9.2
CRITICAL
|
VIEW RECORD |
| CVE-2026-112710 |
Fireware OS
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
9.2
CRITICAL
|
VIEW RECORD |
| CVE-2026-93857 |
Fireware OS
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
9.2
CRITICAL
|
VIEW RECORD |
| CVE-2026-93865 |
Fireware OS
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
9.2
CRITICAL
|
VIEW RECORD |
| CVE-2026-93866 |
Fireware OS
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
9.2
CRITICAL
|
VIEW RECORD |
| CVE-2026-118375 |
llama.cpp
Reporter: DISCLOSURE
|
9.2
CRITICAL
|
VIEW RECORD |
| CVE-2026-112362 |
@fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In PATCH
Reporter: CE714D77-ADD3-4F53-AFF5-83D477B104BB
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-115216 |
Keycloak PATCH
Reporter: EMO
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-104354 |
ADOBE
Reporter: PSIRT
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-105779 |
ADOBE
Reporter: PSIRT
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-108014 |
HCL
Reporter: PSIRT
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-108015 |
HCL
Reporter: PSIRT
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-108142 |
Backup and Replication
Reporter: SUPPORT
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-112352 |
Sunhillo SureLine PATCH
Reporter: DISCLOSURE
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-58256 |
GRR PATCH
Reporter: SECURITY-ADVISORIES
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-90717 |
Dell PowerProtect Data Domain Management Center, Feature Release
Reporter: SECURITY_ALERT
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-14571 |
Futurum Software User Authentication Module
Reporter: CVE-COORDINATION
|
9.1
CRITICAL
|
VIEW RECORD |
| CVE-2026-106076 |
Backup for Microsoft 365
Reporter: SUPPORT
|
9
CRITICAL
|
VIEW RECORD |
| CVE-2026-4337 |
Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application
Reporter: CVE-COORDINATION
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-118008 |
MOZILLA PATCH
Reporter: SECURITY
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-107672 |
AUTODESK
Reporter: PSIRT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-111585 |
TEAMVIEWER PATCH
Reporter: PSIRT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-92372 |
TEAMVIEWER PATCH
Reporter: PSIRT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-114596 |
DHS
Reporter: ICS-CERT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-116672 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-108303 |
Certificate Manager
Reporter: 3938794E-25F5-4123-A1BA-5CBD7F104512
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-108329 |
Threat Response
Reporter: 3938794E-25F5-4123-A1BA-5CBD7F104512
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-116676 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-83831 |
Double free in Microsoft Edge (Chromium-based)
Reporter: SECURE
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-85898 |
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based)
Reporter: SECURE
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-58255 |
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI PATCH
Reporter: SECURITY-ADVISORIES
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-1928 |
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
Reporter: SECURITY
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-109384 |
The Innovative Form Builder – IvyForms
Reporter: SECURITY
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-111120 |
VikRentCar Car Rental Management System
Reporter: SECURITY
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-92797 |
The MemberPress plugin for WordPress
Reporter: SECURITY
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-86396 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-86398 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-86385 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-86378 |
Dell PowerProtect Data Domain, Feature Release
Reporter: SECURITY_ALERT
|
8.8
HIGH
|
VIEW RECORD |
| CVE-2026-102800 |
mod djhelpful articles/helper.php), reachable without authentication
Reporter: SECURITY
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-106087 |
TRO600
Reporter: CYBERSECURITY
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-117604 |
Grav from 1.7.53.3 PATCH
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-111107 |
A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-93434 |
An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-114597 |
DHS
Reporter: ICS-CERT
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-114598 |
DHS
Reporter: ICS-CERT
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-102814 |
RE305 v3
Reporter: F23511DB-6C3E-4E32-A477-6AA17D310630
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-112350 |
Sunhillo SureLine PATCH
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-112351 |
Sunhillo SureLine PATCH
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-112355 |
The MembershipWorks plugin for WordPress PATCH
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-116693 |
Product identification pending PATCH
Reporter: SECURITY-ADVISORIES
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2014-125138 |
C97net qEngine CMS
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-118377 |
mews/pos
Reporter: DISCLOSURE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-104384 |
tunnel gateway and provisioning interfaces in EagleCloud Aquila
Reporter: MANDIANT-CVE
|
8.7
HIGH
|
VIEW RECORD |
| CVE-2026-117602 |
Electrum 4.6.0 PATCH
Reporter: DISCLOSURE
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-90442 |
A stack-based buffer overflow vulnerability in the Fireware OS certd process
Reporter: 5D1C2695-1A31-4499-88AE-E847036FD7E3
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-116682 |
FileBrowser Quantum is a free, self-hosted, web-based file manager PATCH
Reporter: SECURITY-ADVISORIES
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2013-20007 |
Linksys WAG200G
Reporter: DISCLOSURE
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2015-20129 |
CrushFTP PATCH
Reporter: DISCLOSURE
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-117607 |
Xerte Online Toolkits
Reporter: DISCLOSURE
|
8.6
HIGH
|
VIEW RECORD |
| CVE-2026-117558 |
The ai-sdlc plugin MCP server
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-117559 |
DroidMind
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-117560 |
ATXP Gemini CLI extension
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-117561 |
Codefriar sf-mcp
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-117567 |
esp-mcp
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-117569 |
Kali-GPT
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-117573 |
hagent
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-107671 |
ONE
Reporter: SUPPORT
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-116675 |
creates elements crafted PATCH
Reporter: SECURITY-ADVISORIES
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-118378 |
Tabularis PATCH
Reporter: DISCLOSURE
|
8.5
HIGH
|
VIEW RECORD |
| CVE-2026-65119 |
NVIDIA TensorRT-LLM for any platform
Reporter: PSIRT
|
8.4
HIGH
|
VIEW RECORD |
| CVE-2026-65151 |
NVIDIA NeMo Agent Toolkit
Reporter: PSIRT
|
8.4
HIGH
|
VIEW RECORD |
About the Vulnerability Pulse CVE Feed
The Vulnerability Pulse feed tracks live CVE advisories sourced from the National Vulnerability Database and vendor security disclosures. It is designed for SOC analysts, IT administrators, and security teams who need a fast, filterable view of current vulnerabilities without digging through raw NVD data.
How to Use the CVE Advisory Tracker
Use the severity filters to narrow results to Critical or High priority vulnerabilities. Filter by vendor to focus on software and hardware relevant to your environment. Export to CSV for reporting, ticketing, or patch prioritization workflows.
What Is a CVE Advisory?
A CVE (Common Vulnerabilities and Exposures) advisory is a public disclosure of a security vulnerability assigned a unique identifier by MITRE. Advisories include severity scores (CVSS), affected versions, and remediation guidance. Monitoring CVE advisories is a core function of vulnerability management programs and SOC operations.
CVE Analysis & Writeups
For in-depth analysis of specific vulnerabilities, visit the IT Knowledge Bases blog for CVE breakdowns, exploitation analysis, and remediation guidance written for security practitioners.