EUVD-2026-23899
GHSA-hmwv-mfjf-w46v
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
7DescriptionCVE.org
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain a missing authentication for critical function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. Exploitation requires an authenticated user to perform a specific action.
AnalysisAI
Missing authentication in Dell PowerProtect Data Domain 7.7.1.0-8.6 and LTS releases allows remote unauthenticated attackers to execute arbitrary commands with root privileges when combined with user interaction. Affects enterprise backup appliances across multiple release branches including LTS2025 (8.3.1.0-8.3.1.20) and LTS2024 (7.13.1.0-7.13.1.60). CVSS 8.8 with network vector but requires user interaction (UI:R), reducing immediate automation risk. No EPSS or KEV data available at time of analysis, indicating vulnerability is newly disclosed. Dell security advisory DSA-2026-060 confirms patch availability.
Technical ContextAI
Dell PowerProtect Data Domain is an enterprise-class backup and recovery appliance platform providing deduplication and data protection services. The vulnerability stems from CWE-306 (Missing Authentication for Critical Function), where a critical administrative or system function lacks proper authentication controls entirely. The network-accessible interface allows remote interaction without credential verification, but exploitation requires social engineering to trigger the vulnerable code path through authenticated user actions. This architectural flaw affects the core DD OS across three major release tracks: mainline 7.7.1.0-8.6, LTS2025 branch 8.3.1.x, and LTS2024 branch 7.13.1.x, indicating the vulnerable code exists in a shared component used across all supported versions.
RemediationAI
Apply Dell-provided security updates per DSA-2026-060 immediately for internet-facing deployments, prioritizing mainline 8.6+ upgrades and latest LTS patches for 8.3.1.x and 7.13.1.x branches. Consult Dell support portal for exact patched versions as DSA-2026-060 addresses multiple vulnerabilities and may require staged upgrade paths for legacy LTS releases. Interim compensating controls if patching is delayed: restrict management interface access to trusted internal networks only via firewall ACLs blocking external access to DD management ports (typically TCP 443, 3009), implement jump host/bastion architecture requiring VPN for administrative access (eliminates AV:N vector but adds operational overhead), and enforce strict email security controls with link/attachment filtering to prevent social engineering attacks that enable the required user interaction (reduces UI:R likelihood but does not eliminate risk). Deploy network-based intrusion detection to monitor for anomalous command execution patterns on DD appliances. Note that access restrictions reduce attack surface but do not remediate the underlying authentication bypass - patching remains the only complete fix.
SQL injection vulnerability in d4d/statusFilter.php in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.2
The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before
The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default passwor
Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute
Dell RecoverPoint for Virtual Machines prior to 6.0.3.1 HF1 contains hardcoded credentials (CVE-2026-22769, CVSS 10.0) t
An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance vers
cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not requir
The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection
d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote at
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privile
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today