CVE-2026-23853: High severity Dell Data Domain Operating System (DD OS) vulnerability
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a use of weak credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23853?
CVE-2026-23853 has been classified with a severity that indicates a significant risk due to the use of weak credentials.
How do I fix CVE-2026-23853?
To fix CVE-2026-23853, update the affected Dell Data Domain Operating System to the latest version that mitigates this vulnerability.
Which versions are affected by CVE-2026-23853?
CVE-2026-23853 affects Dell Data Domain Operating System versions from 7.7.1.0 to 8.5, as well as specific LTS release versions.
What type of vulnerability is CVE-2026-23853?
CVE-2026-23853 is categorized as a use of weak credentials vulnerability that can be exploited by unauthenticated attackers.
What action should be taken if I am using affected versions of Dell Data Domain OS related to CVE-2026-23853?
If using affected versions, it is crucial to implement the latest security updates provided by Dell to mitigate CVE-2026-23853.