CVE-2026-103799: Critical severity Dell Powerprotect Data Domain Management Center vulnerability
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized system operation on managed systems.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
Deployments running the listed affected Feature Release or LTS release ranges are exposed if a low-privileged attacker has remote access to the Dell PowerProtect Data Domain Management Center.
What level of access does an attacker need?
The attacker needs remote access and low-privileged access. No user interaction is required according to the supplied vector.
What could exploitation allow?
Successful exploitation could allow unauthorized system operations on managed systems. The supplied severity vector indicates high integrity and availability impact, with scope changed.
How can I determine whether my environment is affected?
Check the installed release against the affected ranges: Feature Release 7.7.1.0 through 8.8; LTS2024 7.13.1.0 through 7.13.1.80; LTS2025 8.3.1.0 through 8.3.1.40; and LTS2026 8.6.1.0 through 8.6.1.20.