CVE-2025-36566 | Dell PowerProtect Data Domain with Data Domain Operating System LTS2023 os command injection (dsa-2025-159)

October 7, 2025 Yanac

A vulnerability, which was classified as critical, was found in Dell PowerProtect Data Domain with Data Domain Operating System of Feature Release, PowerProtect Data Domain with Data Domain Operating System LTS2024 and PowerProtect Data Domain with Data Domain Operating System LTS2023 up to 8.1.0.10. This affects an unknown part. Such manipulation leads to os command injection.

This vulnerability is referenced as CVE-2025-36566. The attack can only be performed from a local environment. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More