CVE-2026-103779
HighCVSS 8.3Summary
Dell PowerProtect Data Domain contains an Improper Authentication vulnerability. A low privileged attacker with remote access could exploit it to bypass protection mechanisms.
Risk Assessment
Bypassing a protection mechanism may enable unauthorized access to backup appliance functions or data, increasing the risk of a security breach.
Recommendation
Update Dell PowerProtect Data Domain to a fixed version and restrict remote access to trusted networks.
Other vulnerabilities in Dell PowerProtect Data Domain
See all- CVE-2026-86378High
Dell PowerProtect Data Domain contains a Stack-based Buffer Overflow vulnerability. A low-privileged attacker with remote access could exploit it to gain unauthorized access.
- CVE-2026-86377High
Dell PowerProtect Data Domain contains an Out-of-bounds Write vulnerability. A low-privileged attacker with remote access could exploit it to cause a denial of service.
- CVE-2026-110541High
Dell PowerProtect Data Domain contains an OS Command Injection vulnerability due to improper neutralization of special elements used in OS commands. A high privileged attacker with remote access could exploit it to execute commands.
- CVE-2026-92665Medium
Dell PowerProtect Data Domain contains an Allocation of Resources Without Limits or Throttling vulnerability. An unauthenticated attacker with remote access could exploit this vulnerability, leading to denial of service.
- CVE-2026-86394High
Dell PowerProtect Data Domain contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to command execution.
- CVE-2026-86393High
Dell PowerProtect Data Domain contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to elevation of privileges.
- CVE-2026-86392Medium
Dell PowerProtect Data Domain contains a Heap-based Buffer Overflow vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to denial of service.
- CVE-2026-86390Medium
Dell PowerProtect Data Domain contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- CVE-2026-86389High
Dell PowerProtect Data Domain contains an Integer Overflow or Wraparound vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to code execution.
- CVE-2026-86388Medium
Dell PowerProtect Data Domain contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for the attacker.
Original NVD description (English source)
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

