vciy

Dell PowerProtect Data Domain: 21 records in one advisory

21 records announced together, published between 2026-07-03 and 2026-07-07, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://www.dell.com/support/kbdoc/en-us/000481268/dsa-2026-278-security-update-for-dell-powerpr…. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

20 of 21 records publish a fixed version. The other 1 do not, in held sources.

No record in this batch is listed by CISA in held sources.

11 of 21 records name something of its own. For the other 10, held sources say the same thing about each.

Most commonly mapped weakness across the batch: CWE-78: Improper Neutralization of Special…

What this page does not cover

Every record citing this advisory is on this page.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2026-26355no title heldCWE-78: Improper Neutralization of Special…
CVE-2026-41123rbacCWE-284: Improper Access Control
CVE-2026-41124no title heldCWE-22: Improper Limitation of a Pathname to a…
CVE-2026-44268permission assignment forCWE-732: Incorrect Permission Assignment for…
CVE-2026-44269no title heldCWE-59: Improper Link Resolution Before File…
CVE-2026-46463integer overflow or wraparoundCWE-190: Integer Overflow or Wraparound
CVE-2026-46464no title heldCWE-59: Improper Link Resolution Before File…
CVE-2026-46465externally-controlled format string andCWE-134: Use of Externally-Controlled Format…
CVE-2026-46466less trusted sourceCWE-348: Use of Less Trusted Source
CVE-2026-46467insertion sensitive into logCWE-532: Insertion of Sensitive Information…
CVE-2026-46468no title heldCWE-59: Improper Link Resolution Before File…
CVE-2026-46730authorizationCWE-863: Incorrect Authorization
CVE-2026-49813no title heldCWE-78: Improper Neutralization of Special…
CVE-2026-49814no title heldCWE-78: Improper Neutralization of Special…
CVE-2026-49815no title heldCWE-78: Improper Neutralization of Special…
CVE-2026-53478no title heldCWE-78: Improper Neutralization of Special…
CVE-2026-53479protection mechanism bypassCWE-78: Improper Neutralization of Special…
CVE-2026-53481systemCWE-22: Improper Limitation of a Pathname to a…
CVE-2026-53483authentication severity as itCWE-287: Improper Authentication
CVE-2026-54483no title heldCWE-78: Improper Neutralization of Special…
CVE-2026-56085uninitializedCWE-908: Use of Uninitialized Resource

21 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.