by Kastro
Paper/Archive/CVE-2026-90717

CVE-2026-90717

Dell PowerProtect Data Domain Management Center — Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…

EPSS 0.2%CVSS 9.1
critical.is priorityof 100
30
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 14.2.142 × 202.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability could impact other managed Data Domain systems.

Affected

ProductAffectedFixed inSource
PowerProtect Data Domain Management Center< 8.9.0.0 or later8.9.0.0 or laterCNA
PowerProtect Data Domain Management Center< 7.13.1.90 or later7.13.1.90 or laterCNA
PowerProtect Data Domain Management Center< 8.3.1.50 or later8.3.1.50 or laterCNA
PowerProtect Data Domain Management Center< 8.6.1.30 or later8.6.1.30 or laterCNA

Scores by source

dell (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorydell.com/support/kbdoc/en-us/000515178/dsa-2026-416-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities