p PatchFirst

CVE-2026-68866

CVE-2026-68866

This page contains facts from public vulnerability sources. Check the original advisory before updating.

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Relative Path Traversal vulnerability in the certificate. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.

CVSS 6.5 · Medium · Fix available

Published
Updated

Affected products and versions

  • powerprotect data domain

    Versions
    • ≥ 0, < 8.9.0.0 or later: Affected (semver)
    • ≥ 0, < 7.13.1.80 or later: Affected (semver)
    • ≥ 0, < 8.3.1.40 or later: Affected (semver)
    • ≥ 0, < 8.6.1.20 or later: Affected (semver)

    Update to 7.13.1.80 or later

Original sources

Check your server →