CVE-2026-103792: SQL Injection
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access to managed systems.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker needs remote access to Dell PowerProtect Data Domain Management Center and only low-privileged access. No user interaction is required.
What is the potential impact of successful exploitation?
Successful exploitation could allow unauthorized access to managed systems. The supplied severity vector indicates high confidentiality and integrity impact, with scope changed.
Which releases are affected?
Affected releases are Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20.