CVE-2026-46463

[CVE catalog]

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Severity

Medium · CVSS 6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Published

Jul 2, 2026, 10:00:00 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.33% · Oct 27, 2026

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "data_domain_operating_system",
      "ecosystem": "cpe",
      "fixed_version": ""
    },
    {
      "name": "data_domain_operating_system",
      "ranges": [
        {
          "fixed": "",
          "introduced": "8.4.0.0",
          "last_affected": "8.7.0.0",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "fixed_version": "",
      "provider_record_id": "NVD-CVE-2026-46463"
    }
  ]
}