by Kastro
Paper/Archive/CVE-2026-103799

CVE-2026-103799

Dell PowerProtect Data Domain Management Center — Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…

EPSS 0.3%CVSS 9.6
critical.is priorityof 100
34
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 27.5.275 × 205.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.

Affected

ProductAffectedFixed inSource
PowerProtect Data Domain Management Center< 8.9.0.0 or later8.9.0.0 or laterCNA
PowerProtect Data Domain Management Center< 7.13.1.90 or later7.13.1.90 or laterCNA
PowerProtect Data Domain Management Center< 8.3.1.50 or later8.3.1.50 or laterCNA
PowerProtect Data Domain Management Center< 8.6.1.30 or later8.6.1.30 or laterCNA

Scores by source

dell (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

References

advisorydell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities