CVE-2026-110540: High severity Dell Powerprotect Data Domain Management Center vulnerability

Q: Who is able to exploit this issue?

An attacker needs remote access to the affected Data Domain Management Center and low-privileged access. No user interaction is required.

Q: What impact could successful exploitation have?

Successful exploitation could allow an attacker to perform unauthorized operations. The supplied severity vector indicates integrity impact is high and availability impact is low, with no confidentiality impact listed.

Q: Which release trains are affected?

Affected releases include Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20.

Published Oct 28, 2026

Updated

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation.

Affected Software

1 affected component

Dell Powerprotect Data Domain Management Center>=7.7.1.0<=8.8, >=7.13.1.0<=7.13.1.80, >=8.3.1.0<=8.3.1.40, >=8.6.1.0<=8.6.1.20

Event History

Oct 28, 2026

CVE Published

via MITRE·10:30 AM

Data Sourced

via MITRE·10:30 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is able to exploit this issue?

An attacker needs remote access to the affected Data Domain Management Center and low-privileged access. No user interaction is required.

What impact could successful exploitation have?

Successful exploitation could allow an attacker to perform unauthorized operations. The supplied severity vector indicates integrity impact is high and availability impact is low, with no confidentiality impact listed.

Which release trains are affected?