CVE-2025-36567 | Dell PowerProtect Data Domain with Data Domain Operating System LTS2023 os command injection (dsa-2025-159)

October 7, 2025 Yanac

A vulnerability was found in Dell PowerProtect Data Domain with Data Domain Operating System of Feature Release, PowerProtect Data Domain with Data Domain Operating System LTS2024 and PowerProtect Data Domain with Data Domain Operating System LTS2023 up to 8.1.0.10 and classified as critical. This issue affects some unknown processing. Executing manipulation can lead to os command injection.

This vulnerability is tracked as CVE-2025-36567. The attack is restricted to local execution. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More