CVE Catalog

CVE-2026-103779

HighCVSS 8.3
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain contains an Improper Authentication vulnerability. A low privileged attacker with remote access could exploit it to bypass protection mechanisms.

Risk Assessment

Bypassing a protection mechanism may enable unauthorized access to backup appliance functions or data, increasing the risk of a security breach.

Recommendation

Update Dell PowerProtect Data Domain to a fixed version and restrict remote access to trusted networks.

Other vulnerabilities in Dell PowerProtect Data Domain

See all
Original NVD description (English source)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS