CVE-2026-90720: Medium severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires an attacker to have both local access to the affected system and high privileges. It is therefore primarily relevant where a local privileged account or administrative access has already been obtained.
Which release lines are affected?
Affected versions are Feature Release 7.7.1.0 through 8.8; LTS2024 7.13.1.0 through 7.13.1.80; LTS2025 8.3.1.0 through 8.3.1.40; and LTS2026 8.6.1.0 through 8.6.1.20.
What is the potential impact after exploitation?
A successful exploit could bypass a protection mechanism. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.