CVE-2026-41122 data domain operating system vulnerability
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain a stored cross-site scripting vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
Quick answer
dell data domain operating system should be reviewed and updated if it matches the affected versions. The recommended fix is to apply the vendor-supported patched version or the mitigation steps below, then retest the public website with Fixnx.
Who is affected
Affected versions
- Review vendor advisory for affected versions.
Fixed versions
- Apply the latest vendor-supported patched version.
How to fix it
CVE-2026-41122 affects Dell PowerProtect Data Domain systems running vulnerable DD OS feature or LTS releases listed in Dell DSA-2026-278. The vulnerability can be exploitable by a remote attacker with the privilege level described in the Dell advisory, so exposed management interfaces and shared administrative environments should be prioritized. Dell lists remediated DD OS releases for the affected branches, including feature release 8.8.0.0 or later for the broader 8.7 exposure and LTS updates such as 8.6.1.20, 8.3.1.40, or 7.13.1.80 where applicable. Apply the Dell-supported remediated release for the installed branch, and restrict remote management access until the upgrade is verified.
- Inventory Dell PowerProtect Data Domain appliances, DDVE, APEX Protection Storage, and Data Domain Management Center systems.
- Identify each system's DD OS branch and compare it with the affected ranges for CVE-2026-41122 in Dell DSA-2026-278.
- Download and apply the Dell-supported remediated DD OS release for the installed branch through the approved maintenance process.
- Restrict DD OS management interfaces, APIs, SSH, and administrative consoles to trusted networks and named administrators while remediation is pending.
- Review local and remote user accounts, roles, API tokens, backup integrations, and recent administrative changes for unexpected activity.
- Review DD OS audit logs, system logs, and upstream identity provider logs for failed access attempts, unusual file operations, or privilege misuse.
- Rotate administrative credentials, service tokens, and integration secrets if compromise is suspected or logs show unauthorized access.
Scan now. Google sign-in is only needed to unlock fix guidance.
Verify the fix
- Confirm each affected appliance reports a Dell-remediated DD OS version for its branch after maintenance completes.
- Confirm management interfaces are limited to trusted networks and no emergency exposure exceptions remain in firewall or VPN policy.
- Review post-upgrade health checks, replication status, backup jobs, and audit logs for errors or suspicious activity.
- Rerun a Fixnx scan where Data Domain management or documentation endpoints are reachable from a public website context.
- Document the Dell advisory mapping, upgraded DD OS version, maintenance window, and evidence retained for the change record.
Related categories
Trusted references
FAQ
What is affected by CVE-2026-41122?
dell data domain operating system should be checked against the vendor advisory and trusted references linked on this page.
What should I fix first?
Start with internet-facing sites, admin panels, login flows, plugins, themes, modules, packages, and systems that process user-controlled input or sensitive data.
How do I confirm the fix worked?
Apply the patched version or mitigation, clear caches where relevant, retest the affected workflow, and run a new Fixnx scan to verify public website exposure signals.
How are Fixnx security risk categories chosen?
Fixnx keeps one canonical risk page and assigns only broad, relevant categories such as ecosystem, technology area, or vulnerability class.