CVE-2026-53483
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An improper authentication vulnerability has been discovered in Dell PowerProtect Data Domain. An unauthenticated attacker with remote access could exploit this flaw to gain unauthorized access. This is a critical severity vulnerability as it allows complete system takeover.
Risk Assessment
The organization faces the risk of complete system compromise by an unauthenticated attacker, potentially leading to loss of data confidentiality, integrity, and availability.
Recommendation
It is recommended to immediately upgrade Dell PowerProtect Data Domain to the latest available version as advised by the vendor.
Original NVD description (English source)
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 an improper authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access. This is a critical severity vulnerability as it allows an attacker to take complete control of system; so Dell recommends customers to upgrade at the earliest opportunity.