PT-2026-33417 · Dell · Dell Powerprotect Data Domain

Published 2026-04-17 · Updated 2026-04-17 · CVE-2026-23853

Mitre

CVSS v3.1

8.4

High

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a use of weak credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to the system.

Fix

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2026-23853

Affected Products

Dell Powerprotect Data Domain

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-23853 · Security Note
• https://dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://twitter.com/vuldb/status/2045047165459063110 · Twitter Post
• https://twitter.com/CVEnew/status/2045102599385296898 · Twitter Post