CVE Catalog

CVE-2026-103799

CriticalCVSS 9.6
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain Management Center contains a Missing Authorization vulnerability. A low-privileged attacker with remote access could exploit it to perform unauthorized system operations on managed systems.

Risk Assessment

This could allow unauthorized changes to managed systems, compromising the integrity and availability of backup infrastructure.

Recommendation

Update the software to a patched version as soon as possible and restrict remote access to the management interface.

Other vulnerabilities in Dell PowerProtect Data Domain Management Center

See all
Original NVD description (English source)

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS