CVE-2026-90730: Medium severity Dell PowerProtect Data Domain vulnerability
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.7 are affected, along with LTS2024 versions 7.13.1.0 through 7.13.1.80, LTS2025 versions 8.3.1.0 through 8.3.1.40, and LTS2026 versions 8.6.1.0 through 8.6.1.20.
Does exploitation require an account or user interaction?
No. The issue can potentially be exploited by an unauthenticated attacker with remote access, and the listed vector indicates no user interaction is required.
What is the expected impact of successful exploitation?
Successful exploitation could lead to denial of service. The provided impact metrics also indicate low integrity and availability impact, with no confidentiality impact.