CVE Catalog

CVE-2026-90730

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Risk Assessment

This may cause backup system unavailability and loss of business continuity.

Recommendation

Update Dell PowerProtect Data Domain to a patched version and restrict remote access to administrative interfaces.

Other vulnerabilities in Dell PowerProtect Data Domain

See all
Original NVD description (English source)

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS