CVE-2026-103779: High severity Dell PowerProtect Data Domain vulnerability

Q: Who can exploit this issue?

An attacker needs remote access to the affected Dell PowerProtect Data Domain system and low-privileged credentials or access. No user interaction is required.

Q: What impact could exploitation have?

Successful exploitation could allow an attacker to bypass a protection mechanism. The reported impact includes high confidentiality and integrity impact and low availability impact.

Q: Which releases are affected?

Affected Feature Release versions are 7.7.1.0 through 8.8. Affected LTS releases are LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20.

Published Oct 28, 2026

Updated

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Affected Software

1 affected component

Dell PowerProtect Data Domain>=7.7.1.0<=8.8, >=7.13.1.0<=7.13.1.80, >=8.3.1.0<=8.3.1.40, >=8.6.1.0<=8.6.1.20

Event History

Oct 28, 2026

CVE Published

via MITRE·10:22 AM

Data Sourced

via MITRE·10:22 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker needs remote access to the affected Dell PowerProtect Data Domain system and low-privileged credentials or access. No user interaction is required.

What impact could exploitation have?

Successful exploitation could allow an attacker to bypass a protection mechanism. The reported impact includes high confidentiality and integrity impact and low availability impact.

Which releases are affected?