EUVD-2026-23395Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
9DescriptionCVE.org
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60, contain(s) an Improper Certificate Validation vulnerability in certificate-based login. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
AnalysisAI
Improper certificate validation in Dell PowerProtect Data Domain DD OS 7.7.1.0-8.5, 8.3.1.0-8.3.1.20 (LTS2025), and 7.13.1.0-7.13.1.60 (LTS2024) allows authenticated administrators with remote access to escalate privileges through certificate-based login exploitation. CVSS 7.2 (High) reflects network-based attack with low complexity, though requiring high-privilege credentials (PR:H). EPSS score of 0.02% (6th percentile) indicates very low probability of near-term exploitation. No active exploitation confirmed (not in CISA KEV) and no public exploit identified at time of analysis.
Technical ContextAI
This vulnerability affects Dell PowerProtect Data Domain's certificate-based authentication mechanism across multiple DD OS release tracks (Feature Release, LTS2025, LTS2024). The root cause is CWE-295 (Improper Certificate Validation), meaning the system fails to properly validate client certificates during authentication. This could allow an attacker who already possesses high-privilege credentials to present a manipulated or improperly validated certificate to gain additional unauthorized privileges beyond their intended access level. Certificate-based authentication is commonly used for administrative access to backup and data protection appliances. The vulnerability spans a broad version range across three parallel release tracks, affecting PowerProtect Data Domain appliances running DD OS from 7.7.1.0 through current 8.5 feature releases, suggesting a systemic flaw in certificate handling logic rather than a recent regression.
RemediationAI
Upgrade Dell PowerProtect Data Domain DD OS to patched versions: 7.13.1.70 or later (LTS2024 track), 8.3.1.30 or later (LTS2025 track), or 8.6.0.0 or later (Feature Release track) per Dell Security Advisory DSA-2026-060 available at https://www.dell.com/support/kbdoc/en-us/000450699. If immediate patching is not feasible, implement compensating controls: restrict certificate-based administrative login to trusted jump hosts or bastion servers with enhanced monitoring, enforce multi-factor authentication for all administrative accounts even when using certificate-based login (defense-in-depth), audit and revoke unnecessary high-privilege accounts to minimize attack surface, and monitor authentication logs for anomalous certificate validation patterns or privilege escalation attempts post-login. Note that disabling certificate-based login entirely may impact automated backup workflows and administrative scripts relying on certificate authentication. Review certificate trust stores and revoke any certificates issued to compromised or terminated administrator accounts. These mitigations reduce risk but do not eliminate the vulnerability-patching remains the primary remediation.
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute
Dell RecoverPoint for Virtual Machines prior to 6.0.3.1 HF1 contains hardcoded credentials (CVE-2026-22769, CVSS 10.0) t
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance vers
cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requir
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote at
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('
Same weakness CWE-295 – Improper Certificate Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today