PT-2026-33417 · Dell · Dell Powerprotect Data Domain

Michele Damico · Published 2026-04-17 · Updated 2026-05-08 · CVE-2026-23853

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.5 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.20 Dell PowerProtect Data Domain versions 7.13.1.0 through 7.13.1.50

Description The Data Domain Operating System (DD OS) contains a use of weak credentials. An unauthenticated attacker with local access could potentially exploit this issue to gain unauthorized access to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2026-23853

Affected Products

Dell Powerprotect Data Domain

References · 6

• https://dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23853 · Security Note
• https://t.me/cveNotify/162720 · Telegram Post
• https://twitter.com/vuldb/status/2045047165459063110 · Twitter Post
• https://twitter.com/CVEnew/status/2045102599385296898 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2045132590017896796 · Twitter Post