by Kastro
Paper/Archive/CVE-2026-103792

CVE-2026-103792

Dell PowerProtect Data Domain Management Center — Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…

EPSS 0.4%CVSS 9.6
critical.is priorityof 100
35
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 30.7.307 × 206.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access to managed systems.

Affected

ProductAffectedFixed inSource
PowerProtect Data Domain Management Center< 8.9.0.0 or later8.9.0.0 or laterCNA
PowerProtect Data Domain Management Center< 7.13.1.90 or later7.13.1.90 or laterCNA
PowerProtect Data Domain Management Center< 8.3.1.50 or later8.3.1.50 or laterCNA
PowerProtect Data Domain Management Center< 8.6.1.30 or later8.6.1.30 or laterCNA

Scores by source

dell (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorydell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities