PowerProtect Data Domain EUVD-2026-111824

Exploitation requires both local access to the Dell PowerProtect Data Domain appliance (AV:L) and pre-existing high privileges on it (PR:H) - consistent with a trusted administrator/operator account or insider, not an external or low-privileged user. No user interaction is required (UI:N). The specific product feature, configuration, or code path that triggers the improper integrity-check validation is not described in the available sources. The dominant limiting factors are the high-privilege requirement and lack of network vector, which together sharply reduce realistic attacker reach despite the high confidentiality/integrity/availability impact.

This is a moderate-severity issue (CVSS 6.7) whose real-world risk is substantially constrained by its access requirements rather than by its impact. The CVSS vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N is internally consistent and the limiting factors are clear: AV:L requires local access and PR:H requires the attacker to already hold high privileges on the Data Domain appliance, so this is not a remotely reachable, unauthenticated flaw. The impact metrics (C:H/I:H/A:H) are high because the outcome is a protection-mechanism bypass (CWE-354, Improper Validation of Integrity Check Value), but the prerequisite privilege level means an attacker must essentially already be a trusted administrator/operator. No EPSS score was supplied, the CVE is not listed in CISA KEV, and no public proof-of-concept or exploit reference is present in the input, so there is no signal of active or imminent exploitation. The vuln.today priority is 'this_month' (not act_now/emergency), which aligns with the high-privilege/local profile: a real issue worth patching on a normal cycle rather than an all-hands emergency. The main caveat is missing data - no EPSS, no independent fix-version confirmation, and the triggering mechanism is not described - so prioritization should rest on the access model rather than on any exploitation evidence.

An attacker who already holds high-privileged local access to a Dell PowerProtect Data Domain appliance (e.g. a compromised administrative/operator account or insider) abuses the improper integrity-check validation to bypass a protection mechanism, potentially undermining the trust or immutability controls the appliance enforces over backup data. No public exploit code or PoC reference is present in the available data, and the specific trigger is not described in the sources. Exploitation is gated by the need for pre-existing high privileges and local access, not network reachability.