Dell CVE-2026-23774

Apply Dell Security Advisory DSA-2026-060 patches immediately for all affected Data Domain Operating System versions. Consult https://www.dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities to determine the exact patched version for your release track (Feature Release, LTS2025, or LTS2024), as Dell provides track-specific updates. If immediate patching is not feasible, implement compensating controls: restrict network access to DD OS management interfaces to dedicated jump hosts or bastion servers using firewall rules or network segmentation (reduces AV:N to AV:A equivalent, though this creates operational friction for legitimate administration), enforce multi-factor authentication on all administrator accounts to raise the bar for credential compromise, enable comprehensive command logging and SIEM integration to detect anomalous shell command patterns (provides detection not prevention, with alert fatigue risk if baseline activity is not well-established), and apply principle of least privilege by creating role-based accounts with minimal necessary permissions rather than using root-equivalent credentials for routine tasks (limits blast radius but may conflict with vendor support requirements). Schedule emergency maintenance window for patching given the backup infrastructure criticality and complete post-exploitation control this vulnerability enables.