Is Dell affected by CVE-2026-23776?

Dell PowerProtect Data Domain contains a certificate validation flaw that allows high-privileged attackers to escalate to complete system compromise, potentially exposing backup infrastructure and protected data across affected versions 7.7.1.0-8.5, LTS2025, and LTS2024.

CVE-2026-23776

EUVD-2026-23395 HIGH

2026-04-17 dell

Information Disclosure Dell

7.2

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 17, 2026 - 10:27 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 17, 2026 - 10:22 vuln.today

cvss_changed

patch_available

Apr 17, 2026 - 10:01 EUVD

Analysis Generated

Apr 17, 2026 - 09:39 vuln.today

DescriptionNVD

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain(s) an Improper Certificate Validation vulnerability in certificate-based login. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

AnalysisAI

Improper certificate validation in Dell PowerProtect Data Domain certificate-based login allows high-privileged remote attackers to escalate privileges to full system control (confidentiality, integrity, availability impact). Affects DD OS versions 7.7.1.0-8.5, LTS2025 (8.3.1.0-8.3.1.20), and LTS2024 (7.13.1.0-7.13.1.60). …

RemediationAI

Within 24 hours: Identify all Dell PowerProtect Data Domain appliances in your environment and document current OS versions using Dell's advisory DSA-2026-060. Within 7 days: Test the vendor-released patch in a non-production environment and plan maintenance windows. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-23776 vulnerability details – vuln.today

Back

CVE-2026-23776

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code