CVE-2026-90717: Critical severity Dell Powerprotect Data Domain Management Center vulnerability
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. This vulnerability could impact other managed Data Domain systems.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
A remote attacker with low-privileged access to an affected Data Domain Management Center could potentially exploit it. No user interaction is required.
What is the potential impact beyond the management center itself?
Successful exploitation can lead to elevation of privileges. The vulnerability could also affect other Data Domain systems managed by the vulnerable management center.
Which release lines are affected?
Affected versions include Feature Release 7.7.1.0 through 8.8, LTS2024 7.13.1.0 through 7.13.1.80, LTS2025 8.3.1.0 through 8.3.1.40, and LTS2026 8.6.1.0 through 8.6.1.20.