PT-2026-33427 · Dell · Powerprotect Data Domain Boostfs

Published 2026-04-17 · Updated 2026-04-17 · CVE-2025-36568

NVD

CVSS v3.1

7.8

High

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an insufficiently protected credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to credential exposure. The attacker may be able to use the exposed credentials to access the system with privileges of the compromised account.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-36568

Affected Products

Powerprotect Data Domain Boostfs

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-36568 · Security Note
• https://dell.com/support/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2045109552966688931 · Twitter Post
• https://twitter.com/CVEnew/status/2045102594796732479 · Twitter Post