CVE-2026-90723: SQL Injection
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires a high-privileged attacker who has remote access to the affected Data Domain Management Center. The issue is network-reachable, but it is not exploitable by an unauthenticated or low-privileged attacker based on the available information.
What is the likely impact if exploitation succeeds?
Successful exploitation could lead to information disclosure. No integrity or availability impact is identified in the provided severity vector.
Which release families are affected?
Affected releases include Feature Release versions 7.7.1.0 through 8.8; LTS2024 versions 7.13.1.0 through 7.13.1.80; LTS2025 versions 8.3.1.0 through 8.3.1.40; and LTS2026 versions 8.6.1.0 through 8.6.1.20.